Skip to main content
Laptops

How to Protect Yourself From Lenovo's Superfish Exploit

Learn how to diagnose and get rid of Superfish.

The Lenovo Yoga 3 Pro is one of several Lenovo models that may be affected by Superfish security flaws. Credit: Reviewed.com / Kyle Looney
Nick Schmiedicker
Written by Nick Schmiedicker

Updated March 19, 2015

Products are chosen independently by our editors. Purchases made through our links may earn us a commission.

A couple weeks ago, news broke that almost all Lenovo laptops shipped between September 2014 and January 2015 came pre-loaded with a sneaky little piece of adware called Superfish. It was no mistake: Lenovo intentionally used it to inject ads for Lenovo products into web searches.

While Lenovo stopped pre-installing Superfish in January, millions of users may be open to attack.

The intended use is questionable at best, but it turns out the software also has a gaping security hole that can be exploited to access your secure browser data—passwords, bank info, and more.

Lenovo laptop owners would be especially vulnerable if they’re on a shared network, like a coffee shop's open WiFi hotspot. From there, a hacker would be able to exploit Superfish to do things like intercept your credit card account password or read your emails.

Lenovo stopped pre-installing Superfish in January, but millions of users may be open to attack—including buyers of machines like the new Lenovo Yoga 3 Pro. But it only takes a minute to check your machine and make sure you're protected. We’ll give you the lowdown on how to do just that.

The new Yoga 3 Pro convertible is one of many Lenovo laptops that may be affected by Superfish.
Credit: Reviewed.com / Nick Schmiedicker

The new Yoga 3 Pro convertible is one of many Lenovo laptops that may be affected by Superfish.

Finding and Removing Superfish

If you want a quick fix, Windows has released an update to Windows Defender that will root out Superfish for you. Unless you use Firefox or Thunderbird, in which case you’ll have to follow the steps below to root out the certificate storage used specifically by those browsers.

If you’d rather take the initiative yourself—and you should, just to be sure—follow our step-by-step guide below.

First things first: Let's find out if your Lenovo has Superfish installed. LastPass has a great web browser tool that will give you a clear indicator for whether or not you should be worried.

The LastPass web browser test gives you a clear thumbs up if you're free of Superfish.

The LastPass web browser test gives you a clear thumbs up if you're free of Superfish.

If you get the all-clear, then you’re done! You have nothing to worry about. But if you get some bad news from LastPass, keep reading and we’ll get you through the steps needed to get rid of this pesky software.

1. Uninstall Superfish

  1. Click the Windows Start button, or swipe from the right
  2. Search and launch uninstall program
  3. Right-click on Superfish Inc VisualDiscovery and select Uninstall

2. Uninstall certificates installed by Superfish

  1. Navigate to the Search button again and type certmgr.msc into the field
  2. Launch the certmgr.msc program
  3. Click on Trusted Root Certification Authorities, then Certificates
  4. Look for any certificates that mention Superfish Inc
  5. Right-click on any of those certificates and delete
  6. Restart your browser

(If you use Firefox or Thunderbird, go to step 3. If not, you're all done.)

3. Remove browser and mail client certificates

  1. In Firefox and/or Thunderbird, go to Preferences > Advanced > Certificates
  2. Select "View Certificates"
  3. Same as before: Search for any sign of Superfish, right click and delete

That’s it! You should be all set, but make sure to check LastPass again to make sure it gives you the all-clear.

{{brightcove '3900181072001'}}

Up next