Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Anyone else seeing "Superfish"? FF 52.4.0 ESR

  • Please log in to reply
1 reply to this topic

#1 Duck73


  • Members
  • 1 posts
  • Local time:09:42 PM

Posted 07 October 2017 - 12:51 AM

Hi folks- new to posting here, but have enjoyed visiting for quite some time.



Not sure if this is the right place (and if not, please move it to a better home), but in any case- within the last week I've noticed, within the small textbox that appears in the lower left-hand corner to tell you what FF's connecting to, loading, etc. the message

"Connecting to superfish.com...". Not every time FF goes from one link to another, but often enough, and between familiar links that never showed the message before, that my brow furrowed a bit- anything "-fish" doesn't reassure me regarding online privacy.


So, off to Google, which tells me that Superfish was something preloaded onto HP Lenovo laptops two years ago, ticked off a lot of people, lawsuits abounded- and that's pretty much it.

The superfish.com site times out, and I can't find hide nor hair of anyone else discussing superfish in 2017 in any capacity outside of the Lenovo-related issues.


MBAM isn't finding anything wrong, and I'm not detecting any of the usual symptoms of browser hijacking.

I'm not terrified, but I really don't like new browser behavior that flies under the radar.

I haven't installed any add-ons recently, and since I always keep half an eye on that little textbox to see what's going on while the spinner does its thing, it's not a case of its always having been there and simply escaping notice until recently.


If anyone has a similar story or a cogent thought to share, by all means, please do!

(FYI system is Win 7 Home Premium x64)

Edited by hamluis, 10 October 2017 - 01:43 PM.
Moved from Web Browsing/Email to Am I Infected - Hamluis.

BC AdBot (Login to Remove)


#2 buddy215


  • Moderator
  • 13,508 posts
  • Gender:Male
  • Location:West Tennessee
  • Local time:07:42 PM

Posted 07 October 2017 - 06:16 AM

Welcome to BC....


First, look for Superfish in your list of installed programs. If there...uninstall.


Back when Lenovo was caught...Lenovo issued a tool for removal of Superfish. There were some manual instructions given

by security programs as well as the removal tool. Norton gave these instructions for Firefox and Thunderbird: (I'm assuming your computer is not a Lenovo)


Open the Firefox browser and select Options from the menu.
Select Advanced from the Options window.
Next, select the Certificates tab and then click View Certificates.
In the "Certificate Manager" window, select the Authorities tab and then scroll through the list to find and select the “Superfish, Inc.” certificate. Click the Delete or Distrust button.
In the Delete or Distrust CA Certificates window, select the “Superfish, Inc.” entry. Click on OK in all open windows to accept the changes.
After the certificate for SuperFish has been deleted, restart your computer.
Repeat this process for the Thunderbird email client.

If you have Firefox 56 installed then you can find the Certificate Manager under the Privacy and Security Tab



Use the programs below to Clean, remove adware and remove malware.


Use CCleaner to remove Temporary files, program caches, cookies, logs, etc. Use the Default settings. No need to use the

Registry Cleaning Tool...risky. Pay close attention while installing and UNcheck offers of toolbars....especially Google.

After install, open CCleaner and run by clicking on the Run Cleaner button in the bottom right corner.

CCleaner - PC Optimization and Cleaning - Free Download


Download AdwCleaner by Xplode onto your desktop. (compatible with Windows 7, 8 and 10)

  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Scan button.
  • When the scan has finished click on Clean button.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.
  • download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users