Lenovo found to include unremovable software which spies on users (a clean install of Windows doesn't fix it - BIOS level)

[GoodBytes]

Lenovo is under hot water again,

This time, it has been found that Lenovo using its BIOS inject its own software on any Windows installation, replacing "autochk.exe" system file signed by Microsoft, with its own, which automatically runs on the user system to install allegedly an "optimization software", called "Lenovo Service Engine" which is hidden from the users eyes. If you remove it, restoring the file back the way it was, or delete it (Windows needs that file), the BIOS will replace it back at boot up.

This affects Windows 7 and 8 users, and possibly Windows 10 as well.

It has been found that the software collects all sorts of data from the user, and sends it to a Lenovo servers which allegedly is used for telemetry purposes. Unlike Microsoft, the privacy policy doesn't go into details on what it collects, beside the "no personable identifiable information collected" claim in the license agreement of the system when you first startup the device. Also, the users thinks that they can remove the software, but you can't in reality. It can also deliver software to the system without the user knowing.

Oh and if you think you'll find it in task manager the process to kill it, well, you can't. It runs on the BIOS, outside of the OS.

The way it works, is that it uses Microsoft's Platform Binary Table (which is being used incorrectly here, as a back door to implement Lenovo software). The actual purpose of Microsoft's Platform Binary Table was for allowing anti-theft protection system on laptops. Microsoft implementation is in trusting select manufactures to use ti properly, as it was originally designed to be used for. But I guess now it has backfired in a way. OEMs can't be trusted it seams.

Lenovo released a statement after the news broke up that from now on Lenovo system produced from this date won't have this anymore. No information if current systems will get a BIOS update to remove it or not.

Source: http://www.neowin.net/news/lenovo-in-hot-water-once-again-for-secretly-installing-unremovable-software

[TheAmazingCookieFromSquare]

The moment I was about to buy a Lenevo Y50

[NeatSquidYT]

oh, prebuilts!

[ShadowCaptain]

SNIP

 

Microsoft with W10, Lenovo, sheesh can they all just leave us alone  :mellow:  :mellow:  :mellow:

[Arty]

Windows does this too.

but yea we don't need more people  spying. 

[JLCitadel]

Their bloatware is also quite irritating to deal with tbh. One Key technology was crap.

[Shakaza]

Great. I have a Lenovo laptop from like 2011 or something with a 2nd generation Intel i5. I wonder if that has this. >_<

[GoodBytes]

Windows does this too.

but yea we don't need more people  spying.

Microsoft I trust. Much like Google. They have long proven what they collect is safe. Here with Lenovo, we don't know, and I don't see the point in data collecting. Google and Microsoft (as well with Apple), uses that data to, yes sale it, but also to improve their product and services. Lenovo.... hmm doubt it. I think it is just for selling purposes. Also, is the data collected, is it protected? Or their servers are easy to crack?

[Arty]

Microsoft I trust. Much like Google. They have long proven what they collect is safe. Here with Lenovo, we don't know, and I don't see the point in data collecting. Google and Microsoft (as well with Apple), uses that data to, yes sale it, but also to improve their product and services. Lenovo.... hmm doubt it. I think it is just for selling purposes. Also, is the data collected, is it protected? Or their servers are easy to crack?

Very True.

[ilikemacandpc]

I just bought a Lenovo Thinkpad X250. Damn it. 

[multifrag]

Pretty sure somebody will send a bios version with out the spy if not already. It's a shame on how companies portray that their products are secure, but when you add a backdoor to your system a smart attacker will use it...

[Levent]

oooooooh, thats why we have a special "OS mode" selector that is only Windows8 and "Other" I noticed that it did absolutely nothing.

[CydiaDash]

F*** Lenovo. Seriously. Why?!

[PinnIver]

I just bought a Lenovo Thinkpad X250. Damn it. 

Return it, show them that this kind of shit is not acceptable.

[terrytek]

Good thing i put Vista on my lenovo laptop.

[mikeeginger]

And this is why I will not 

buy a lenovo laptop 

[ChineseChef]

Microsoft I trust. Much like Google. They have long proven what they collect is safe. Here with Lenovo, we don't know, and I don't see the point in data collecting. Google and Microsoft (as well with Apple), uses that data to, yes sale it, but also to improve their product and services. Lenovo.... hmm doubt it. I think it is just for selling purposes. Also, is the data collected, is it protected? Or their servers are easy to crack?

 

On this same note, Lenovo just got caught with Superfish.  It is like they learned nothing from that.  Or maybe they learned that despite everything, the average consumer just literally doesn't care.  I am not sure which would be worse.

[HarmFull]

Owch, first the factory included Malware and now this. Lenovo you guys are playing a dirty game!

[GoodBytes]

Good thing i put Vista on my lenovo laptop.

It could be affecting XP and Vista for all we know. It just wasn't looked into.

[GoodBytes]

oooooooh, thats why we have a special "OS mode" selector that is only Windows8 and "Other" I noticed that it did absolutely nothing.

Nope. Windows 7 is included.

And that option is a simple way to say: CSM (Compatibility Support Module) enabled or disabled, with Secure Boot enable or disable together.

So, if you want to install Windows 7 say for example, as Windows 7 is not UEFI ready at 100%, you need to set UEFI to emulate the old BIOS (CSM enabled), and disable Secure Boot.

[Jerakl]

I thought a saw a post earlier about fixing this. Something to do with autochk.exe n stuff.

Also included manually flashing the BIOS chip on the pc. was super ghetto.

[Lethal Seraph]

Microsoft I trust. Much like Google. They have long proven what they collect is safe. Here with Lenovo, we don't know, and I don't see the point in data collecting. Google and Microsoft (as well with Apple), uses that data to, yes sale it, but also to improve their product and services. Lenovo.... hmm doubt it. I think it is just for selling purposes. Also, is the data collected, is it protected? Or their servers are easy to crack?

 

Lenovo's logic would be 'If the big boys can do it, we can too. We'll just do it sneaky-sneaky.'

[EpicAdom]

@PaulKolby

[Centurius]

Let's just call it what it is, a rootkit.

[zacRupnow]

Anyone remember E-Machines? I've got an old laptop of theirs running XP Server, still has some of my dad's military files on it, he was deciding between it and a Lenovo...