Pc users on Lenovo’s online forums have found out that the Chinese business has been preloading certain consumer laptop versions with an application called Superfish Visual Discovery. Simply put, the software programs keep track of your searches and browsing routines (even on protected websites) and utilises this data to insert alternative ads on the web sites you go to. It’s not clear what models have come preloaded with the computer software, though end users have revealed spotting it on Lenovo Y50, Z40, Z50, G50 and Yoga 2 Pro models.
List of affected Lenovo Laptops
Superfish may have appeared on these models:
G Series: G410, G510, G710, G40-70, G50-70, G40-30, G50-30, G40-45, G50-45
U Series: U330P, U430P, U330Touch, U430Touch, U530Touch
Y Series: Y430P, Y40-70, Y50-70
Z Series: Z40-75, Z50-75, Z40-70, Z50-70
S Series: S310, S410, S40-70, S415, S415Touch, S20-30, S20-30Touch
Flex Series: Flex2 14D, Flex2 15D, Flex2 14, Flex2 15, Flex2 14(BTM), Flex2 15(BTM), Flex 10
MIIX Series: MIIX2-8, MIIX2-10, MIIX2-11
YOGA Series: YOGA2Pro-13, YOGA2-13, YOGA2-11BTM, YOGA2-11HSW
E Series: E10-30
LastPass Superfish Checker
LastPass has created a Web tool that makes it easy to check to see if your computer is infected. You can check by simply clicking on this link. To manually check for the Superfish adware and uninstall it, head to the Windows Control Panel, select Programs and click Uninstall a Program. Search the list for Visual Discovery. If it is there, click the program and select Uninstall. Next you have to go to the CertMgr to remove the certificates. Below is a pic of my certmgr on my Lenovo U310 Touch. Luckily, I was not affected by this.
You’re not finished yet, though, there is one more step. You must also uninstall the Superfish certificates. Start by clicking the Windows Start button and typing certmgr.msc in the search box. Launch the certmgr.msc program, click on Trusted Root Certification Authorities, followed by Certificates. Search through the certificates for anything mentioning Superfish Inc. Once you have found the certificates, right-click them and select Delete.
To make sure you have fully removed the program, restart your browser and revisit the LastPass web tool.