Lenovo, the top-selling laptop brand in 2014, has released a tool to remove one of their default programs from your computer due to a bug that allows attackers to view browser traffic without a user's permission. If you own a Lenovo laptop, you may be vulnerable and should read on to learn how to remove the software.
The program, Superfish, is meant to be a pre-installed, but "safe," adware program for Lenovo laptops. It gave users shopping assistance to help find the cheapest items online using the images given by a website.
However, after exposure of the vulnerability in the software, Lenovo has released a program to check for the existence of and completely remove the vulnerable software from your computer. They have also provided instructions to manually remove the software through the uninstall window and removal of the security certificate on your local machine. Note: There are a few extra steps if you use FireFox or ThunderBird to remove additional certificates.
Click here for the software or find the steps to manually remove all traces of it.
Personally, my Lenovo laptop did not come with the software, so there was no need to remove it. Therefore, not EVERY Lenovo laptop is at risk, but every notebook owner should at least check their own machines. If you are interested in how the vulnerability is exploited, the technical details have been released by Errata Security here.