purplehaze 0 Posted April 4, 2015 Share Posted April 4, 2015 I bought a new lenovo laptop a few months ago. It had Superfish preinstalled on it. I promptly removed the certificates, and used the lenovo removal tool to ensure that it was fully removed. I have been using the laptop with no issues since. Until today, Superfish came back to haunt me. Every time i type in a website into chrome (Any website) and click enter ESET notification appears and keeps blocking either.. 04/04/2015 22:20:32 hxxp://www.superfish.com/ws/sf_main.jsp?dlsource=rkkrvko&CTID=dsoo&rnd=22 Blocked by internal blacklist C:\Program Files (x86)\Google\Chrome\Application\chrome.exe or 04/04/2015 22:13:08 ssl://www.superfish.com Blocked by internal blacklist C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Does this mean Superfish was not successfully removed? I dont see the certificate anywhere, nor is it in the installed programs. Any help on this would be really appreciated. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,074 Posted April 4, 2015 Administrators Share Posted April 4, 2015 It seems you have a Chrome Superfish extension installed. Is the address blocked even if you start Chrome without extensions? Link to comment Share on other sites More sharing options...
purplehaze 0 Posted April 4, 2015 Author Share Posted April 4, 2015 Thank you so much for your help. I disabled extensions and that stopped the notifications . I haven't installed any new extensions in weeks so never thought of that. Link to comment Share on other sites More sharing options...
TomFace 539 Posted April 4, 2015 Share Posted April 4, 2015 FYI ...https://forum.eset.com/topic/4156-lenovo-caught-installing-adware-on-new-computers/ Link to comment Share on other sites More sharing options...
SweX 871 Posted April 5, 2015 Share Posted April 5, 2015 You could also try running this tool to see if it finds anything more related to Superfish. hxxp://www.eset.com/int/download/utilities/detail/family/274/ Link to comment Share on other sites More sharing options...
rugk 397 Posted April 6, 2015 Share Posted April 6, 2015 @SweX WOW, I didn't know that ESET published their own tool to remove it. Great... However in their KB article they linked to the official tool from Levono, so what's the best way? Use the ESET tool or the Levono tool? Link to comment Share on other sites More sharing options...
dom1da 10 Posted April 6, 2015 Share Posted April 6, 2015 (edited) i have a lenovo G50-70 laptop that came with superfish pre-installed and i have run both and eset tool is better as lenovo tool missed some files and registry entries Edited April 6, 2015 by dom1da Link to comment Share on other sites More sharing options...
SweX 871 Posted April 7, 2015 Share Posted April 7, 2015 @SweX WOW, I didn't know that ESET published their own tool to remove it. Great... However in their KB article they linked to the official tool from Levono, so what's the best way? Use the ESET tool or the Levono tool? I search yesterday and I searched now again, but I just can't find the article, blog post, or whatever it was that I read a few days ago where it was nicely explained that the ESET tool would literally find everything connected to Superfish. So you just have to believe me...this tool rocks. Link to comment Share on other sites More sharing options...
rugk 397 Posted April 7, 2015 Share Posted April 7, 2015 i have a lenovo G50-70 laptop that came with superfish pre-installed and i have run both and eset tool is better as lenovo tool missed some files and registry entries Okay. But the much more important thing is the root certificate. So AFAIK the Levono tool doesn't remove the root certificate, so how does the ESET tool? @SweX Sounds good. So the root certificate too? Link to comment Share on other sites More sharing options...
dom1da 10 Posted April 7, 2015 Share Posted April 7, 2015 (edited) @rugk and SweX yes i looked at the root certificates on my computer and superfish root certificate was gone. so eset tool does remove it which is very good job eset! Edited April 7, 2015 by dom1da Link to comment Share on other sites More sharing options...
rugk 397 Posted April 7, 2015 Share Posted April 7, 2015 (edited) Ah great. So it's a bit strange why they don't link to their own tool in the KB article. But I've submitted it via the rating feature there so maybe they will change it soon. Edited April 7, 2015 by rugk Link to comment Share on other sites More sharing options...
SweX 871 Posted April 8, 2015 Share Posted April 8, 2015 @rugk, I couldn't have answered the root cert question as I haven't used the tool, so good that dom1da could chime in on that. Yeah, I also think it would be great to have their own tool included in their own KB article. Link to comment Share on other sites More sharing options...
Recommended Posts