Menu

Superfish - possible malware threat

Notification from AVG advising on a possible threat on your computer. 

 

 

How to remove Superfish


and its certificate from your Lenovo® PC

Superfish logo

What is Superfish?

Superfish is a piece of software that Lenovo has admitted to pre-installing on many of its laptops to "enhance the shopping experience" of its users. However, the U.S. Computer Emergency Readiness Team calls Superfish a "man-in-the-middle attack" because of how it "intercepts users' web traffic to provide targeted advertisements."

 

Why is Superfish so dangerous?

Superfish snoops in on your web browsing and secretly slips ads into webpages. But the really dangerous part is that it's pre-installed with root certificate authority, which allows it to impersonate any server's security certificate.

 

If this certificate is compromised by hackers, you could be tricked into logging in to a fake website and giving hackers your password. Because of Superfish, any of your accounts—including encrypted bank accounts—could be easily compromised.

 
 
 
 

Which computers are affected?

According to Lenovo, Superfish may have been pre-installed
on the following models:

Lenovo laptop

E Series:

G Series:

S Series:

U Series:

Y Series:

Z Series:

Edge Series:

Flex Series:

MIIX Series:

YOGA Series:

E10-30

G410, G510, G710, G40-70, G50-70, G40-30, G50-30, G40-45, G50-45, G40-80

S310, S410, S40-70, S415, S415Touch, S435, S20-30, S20-30Touch

U330P, U430P, U330Touch, U430Touch, U530Touch

Y430P, Y40-70, Y50-70, Y40-80, Y70-70

Z40-75, Z50-75, Z40-70, Z50-70, Z70-80

Edge 15

Flex2 14D, Flex2 15D, Flex2 14, Flex2 15, Flex2 Pro, Flex 10

MIIX2-8, MIIX2-10, MIIX2-11, MIIX 3 1030

YOGA2Pro-13, YOGA2-13, YOGA2-11, YOGA3 Pro

 
 
 
 

Will restoring from a backup help?

Superfish has been pre-installed by Lenovo. Therefore, restoring your computer to factory condition from either a backup partition or a backup DVD will not solve the problem if Superfish is also part of your backup. Superfish would only be reinstalled, too.

So if you ever use a backup to restore your system, you may need to again remove Superfish and its root security certificate from your system.

ASKER International School

Asker Logo

Johan Drengsruds Vei 60, 1383 Asker. Tel: +47 908 90 609 E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.