1. Welcome Guest! In order to create a new topic or reply to an existing one, you must register first. It is easy and free. Click here to sign up now!.
    Dismiss Notice

Lenovo shipping computers with adware pre-installed.

Discussion in 'General Malware And Security' started by Plastic Nev, Feb 20, 2015.

  1. Plastic Nev

    Plastic Nev SUPER MODERATOR IN MEMORY

    Joined:
    May 2, 2009
    Messages:
    2,801
    Location:
    In front of a monitor in Blackburn Lanc's UK.
    Operating System:
    Windows 7
    Computer maker Lenovo has been forced to remove hidden adware that it was shipping on its laptops and PCs after users expressed anger.
    The adware - dubbed Superfish - was potentially compromising their security, said experts.
    The hidden software was also injecting adverts on to browsers using techniques more akin to malware, they added.
    Lenovo faces questions about why and for how long it was pre-installed on machines - and what data was collected.
    The company told the BBC in a statement: "Lenovo removed Superfish from the preloads of new consumer systems in January 2015. At the same time Superfish disabled existing Lenovo machines in the market from activating Superfish.

    Source : http://www.bbc.co.uk/news/technology-31533028
     
  2. Tony D

    Tony D Administrator Administrator

    Joined:
    Sep 25, 2009
    Messages:
    4,991
    Location:
    SE Pennsylvania, USA
    Operating System:
    Windows XP Professional
  3. Tony D

    Tony D Administrator Administrator

    Joined:
    Sep 25, 2009
    Messages:
    4,991
    Location:
    SE Pennsylvania, USA
    Operating System:
    Windows XP Professional
  4. Plastic Nev

    Plastic Nev SUPER MODERATOR IN MEMORY

    Joined:
    May 2, 2009
    Messages:
    2,801
    Location:
    In front of a monitor in Blackburn Lanc's UK.
    Operating System:
    Windows 7
    No Tony, it's an Acer machine and the problem appears to have come in and stuck to her Chrome browser, however you will see that if you read the thread as there also seems other problems in the background.

    Nev.
     
  5. allheart55 (Cindy E)

    allheart55 (Cindy E) Administrator Administrator

    Joined:
    Jun 11, 2009
    Messages:
    10,424
    Location:
    Pennsylvania
    Operating System:
    Windows 10
    Computer Brand or Motherboard:
    ASUS M4A77TD AM3 AMD 770 ATX AMD
    CPU:
    AMD Phenom II X6 1090T-Thuban 3.2GHz
    Memory:
    Crucial-DDR3 SDRAM 1333-8GB
    Hard Drive:
    WD Caviar Black SE HDD 640 GB - WD Caviar Black SE HDD 500 GB
    Graphics Card:
    Sapphire Radeon HD-7870 2GB
    Power Supply:
    CORSAIR CMPSU-750W
    I posted an article reprint of this problem yesterday at ExTS.
    I'll never purchase a Lenovo now. They crossed the line.
     
  6. DSTM (Dougie)

    DSTM (Dougie) Registered Members

    Joined:
    May 3, 2009
    Messages:
    8,270
    Location:
    SYDNEY AUSTRALIA
    Operating System:
    Windows 7
    I think most of the manufacturers are up to no good in some way.
    Some get caught some don't.
    I read somewhere that some TV manufacturers are now gathering all your user information with inbuilt recording devices.
     
  7. allheart55 (Cindy E)

    allheart55 (Cindy E) Administrator Administrator

    Joined:
    Jun 11, 2009
    Messages:
    10,424
    Location:
    Pennsylvania
    Operating System:
    Windows 10
    Computer Brand or Motherboard:
    ASUS M4A77TD AM3 AMD 770 ATX AMD
    CPU:
    AMD Phenom II X6 1090T-Thuban 3.2GHz
    Memory:
    Crucial-DDR3 SDRAM 1333-8GB
    Hard Drive:
    WD Caviar Black SE HDD 640 GB - WD Caviar Black SE HDD 500 GB
    Graphics Card:
    Sapphire Radeon HD-7870 2GB
    Power Supply:
    CORSAIR CMPSU-750W
    Microsoft vs. SuperFish

    bshark.jpg

    Channeling Batman with shark repellent, Microsoft today has issued an update for its built-in Windows Defender product that eliminates the secret adware on Lenovo computers that has become a hot button topic over the last 48 hours.
    Richard provided detail and commentary on SuperFish yesterday, and then subsequently posted up a poll on What grade would you give Lenovo's response to the Superfish situation?
    If you own a Lenovo computer, make sure to update Windows Defender to get the bits designed to eliminate the threat.
    In brief, Lenovo started installing a special bit of adware, dubbed SuperFish, on its computers last year. The company came under scrutiny then, but the outcry was minor enough for it to ignore. However, after researchers dug deeper into the adware this week, it was found that the software did more than just insert ads into random web pages. In addition to serving online commercials that nobody wants, SuperFish also tampers with computer security in such a way that attackers could spy on all web browser traffic.
    So what you say? I have nothing to hide, you say?
    According to security experts, SuperFish allows attackers to see ALL the communication that's supposed to be confidential including banking transactions, passwords, emails, instant messages, and more.
    WindowsITPro expert, Troy Hunt, has promised in-depth coverage for SuperFish next week as part of his weekly Security Sense feature.


    http://winsupersite.com/windows/microsoft-vs-superfish
     
  8. Tony D

    Tony D Administrator Administrator

    Joined:
    Sep 25, 2009
    Messages:
    4,991
    Location:
    SE Pennsylvania, USA
    Operating System:
    Windows XP Professional
    I think Lenovo covered the removal procedure nicely. Basically, you uninstall the SuperFish program and then delete the trusted certificate.
     
  9. allheart55 (Cindy E)

    allheart55 (Cindy E) Administrator Administrator

    Joined:
    Jun 11, 2009
    Messages:
    10,424
    Location:
    Pennsylvania
    Operating System:
    Windows 10
    Computer Brand or Motherboard:
    ASUS M4A77TD AM3 AMD 770 ATX AMD
    CPU:
    AMD Phenom II X6 1090T-Thuban 3.2GHz
    Memory:
    Crucial-DDR3 SDRAM 1333-8GB
    Hard Drive:
    WD Caviar Black SE HDD 640 GB - WD Caviar Black SE HDD 500 GB
    Graphics Card:
    Sapphire Radeon HD-7870 2GB
    Power Supply:
    CORSAIR CMPSU-750W
    A lot of people wouldn't know where to find the certificate.
     
    DSTM (Dougie) likes this.
  10. Tony D

    Tony D Administrator Administrator

    Joined:
    Sep 25, 2009
    Messages:
    4,991
    Location:
    SE Pennsylvania, USA
    Operating System:
    Windows XP Professional
    I didn't know about certificates or where to find them until I read the article by Lenovo and the article I posted earlier. Both say the same thing. I took a Penn State course in Internet Security. We talked about digital certificates, but that was some time ago. I don't remember how they work in the real world.
     
  11. Rich M

    Rich M Guest

    Joined:
    Dec 24, 2013
    Messages:
    4,580
    Location:
    NE Pa USA
    Operating System:
    Windows 7
    Computer Brand or Motherboard:
    MSI Z97 PC Mate LGA 1150 Intel Z97
    CPU:
    Intel i7 4790K 4.0Ghz
    Memory:
    Corsair Vengeance 16GB (2x8GB) DDR3 2133
    Hard Drive:
    Crucial 256 Gb SSD+ WD Raptor 300 Gb Sata III
    Graphics Card:
    Radeon R9 280 2GB HDMI
    Power Supply:
    Seasonic 750 watt
    For goodness sake they put this in some models and removed it. If I had a dollar for every spyware program Dell has put
    on their pcs or HP, I would not have to work. Weather Bug, Yontoo etc...
    Hey better not use any Seagate or WD hard drives:
    http://www.dailydot.com/politics/nsa-kaspersky-lab-russia-equation-group/
    OK can't buy any pcs made in China either:
    http://www.theguardian.com/technology/2012/sep/14/malware-installed-computers-factories-microsoft
    Hey at least Lenovo has genuine Windows on them or do they?
    http://www.microsoft.com/philippine...east-asia-afected-with-dangerous-malware.aspx
     
  12. allheart55 (Cindy E)

    allheart55 (Cindy E) Administrator Administrator

    Joined:
    Jun 11, 2009
    Messages:
    10,424
    Location:
    Pennsylvania
    Operating System:
    Windows 10
    Computer Brand or Motherboard:
    ASUS M4A77TD AM3 AMD 770 ATX AMD
    CPU:
    AMD Phenom II X6 1090T-Thuban 3.2GHz
    Memory:
    Crucial-DDR3 SDRAM 1333-8GB
    Hard Drive:
    WD Caviar Black SE HDD 640 GB - WD Caviar Black SE HDD 500 GB
    Graphics Card:
    Sapphire Radeon HD-7870 2GB
    Power Supply:
    CORSAIR CMPSU-750W
    :lglf:C'mon, Rich, really?

    Running counterfeit in South East Asia. What does that have to do with anything?
    Criminals are installing this. Is Lenovo considered criminal?
    That's not in the US. (Iran, Russia, China, Pakistan, and other Middle East and North African countries)
     
  13. Plastic Nev

    Plastic Nev SUPER MODERATOR IN MEMORY

    Joined:
    May 2, 2009
    Messages:
    2,801
    Location:
    In front of a monitor in Blackburn Lanc's UK.
    Operating System:
    Windows 7
    It would seem it is once the machines are shipped to China or some of the many third world countries, which considering so many are either made in China or those other places in the first place, does make you wonder if anything is going to be safe. How many computers, hard drives, etc are coming out of the Chines factory, or the Taiwan factory, or whichever factory, are being diverted, compromised, and then shipped on to the US or UK eh?
     
  14. Rich M

    Rich M Guest

    Joined:
    Dec 24, 2013
    Messages:
    4,580
    Location:
    NE Pa USA
    Operating System:
    Windows 7
    Computer Brand or Motherboard:
    MSI Z97 PC Mate LGA 1150 Intel Z97
    CPU:
    Intel i7 4790K 4.0Ghz
    Memory:
    Corsair Vengeance 16GB (2x8GB) DDR3 2133
    Hard Drive:
    Crucial 256 Gb SSD+ WD Raptor 300 Gb Sata III
    Graphics Card:
    Radeon R9 280 2GB HDMI
    Power Supply:
    Seasonic 750 watt
    You miss my whole point it is not where the pc is but where it was made that matters. 90% of all brand name pcs are made in SouthEast Asia.
     
  15. allheart55 (Cindy E)

    allheart55 (Cindy E) Administrator Administrator

    Joined:
    Jun 11, 2009
    Messages:
    10,424
    Location:
    Pennsylvania
    Operating System:
    Windows 10
    Computer Brand or Motherboard:
    ASUS M4A77TD AM3 AMD 770 ATX AMD
    CPU:
    AMD Phenom II X6 1090T-Thuban 3.2GHz
    Memory:
    Crucial-DDR3 SDRAM 1333-8GB
    Hard Drive:
    WD Caviar Black SE HDD 640 GB - WD Caviar Black SE HDD 500 GB
    Graphics Card:
    Sapphire Radeon HD-7870 2GB
    Power Supply:
    CORSAIR CMPSU-750W
    I didn't miss your point. Apples and Oranges. :bnghd: :jump:
     
  16. Match

    Match Registered Members

    Joined:
    Apr 23, 2009
    Messages:
    4,175
    Location:
    Wolverhampton, UK.
    Computer Brand or Motherboard:
    Abit AN52
    CPU:
    AMD Athlon dual core 5000+
    Memory:
    4 Gig Corsair
    Hard Drive:
    160 Gb Hitachi 500 Gb Western Digital
    Graphics Card:
    Radion XFX 4650
    Power Supply:
    550W EZcool
    Aren't computers assembled where Labour costs are low? surely this problem is a result of large corporations trying to gather marketing information? And by that I mean wouldn't Apple love to have one of there machines in the Microsoft Windows development office? And visa versa, same with Google Android, etc one employee, one PC, one piece of spyware?
     
  17. starbuck

    starbuck Administrator - Malware Removal Specialist Administrator

    Joined:
    Sep 26, 2009
    Messages:
    3,825
    Location:
    Midlands, UK
    Operating System:
    Windows 10
    CPU:
    AMD Athlon II x2 250 Processor 3.00GHz
    Memory:
    8gb DDR3
    Hard Drive:
    500gb SATA
    Graphics Card:
    ASUS GeForce GTX 960 2gb
    Power Supply:
    650w PowerCool X-Viper
    There ia a Superfish, Komodia, PrivDog vulnerability test here: https://filippo.io/Badfish/
    Note: ... you should do the test with all browsers installed.

    The test only takes seconds to run and if clear you should get this message:

    130fe30c01d8d439ecad8fac6eddc83a.png

    That was the message I got after running the test on my Acer laptop.
     
    Tony D likes this.

Share This Page