Protecting Against “SuperFish’s

VisualDiscovery Adware” Using Saner

Introduction

VisualDiscovery is an Adware program by SuperFish.inc. VisualDiscovery was able to access consumer's personal

information sent online, including login credentials, Social Security numbers, medical information, and financial and

payment information.

In this article, we will cover step by step procedure to protect against “VisualDiscovery” Adware using Saner.

“VisualDiscovery” Infection Method

VisualDiscovery Adware comes bundled with many free software that are available over Internet. Between 2014-

2015, VisualDiscovery came as a pre-installed Software in some of the Lenovo laptops.

Protecting against “VisualDiscovery Adware”

using Saner

For illustration, we have chosen “Windows 8.1” system.

How to check, if systems are affected by VisualDiscovery Adware?

Step 1: Click on “Queries” menu item that is on the left side pane.

Fig 1

Step 2: After clicking on “Queries” A window appears as shown below. Click on “Create Query” on the top right corner.

Fig 2

Step 3: Figure 3 shows how to create a query for finding “VisualDiscovery” adware present in all systems across

network of endpoints. Fill in the details as shown below and click on “Create”.

Fig 3

Step 4: The “Query Visualdiscovery” is created as shown below. Click on “Run” to check the results.

Fig 4

Step 5: After successfully running the query, result will be displayed as show below. It is confirmed that “VisualDiscovery”

is present in the following listed systems.

Fig 5

How to remove VisualDiscovery Adware using Saner?

Step 1: Click on “CMD & Ctrl” section menu item. A window appears as shown below. Click on “Create Command”

on the top right corner.

Fig 6

Step 2: Click on “Software Deployment” to install or uninstall any Software.

Fig 7

Step 3: Select “Uninstall” from command, type in “VisualDiscovery” in Application Name and choose silent option

by typing ‘/s’ (without quote). Add Name and description and click on “Create”.

Fig 8

Step 4: We can see the rule is created. Saner will start to uninstall the specified application. Status will be “scheduled”

once the rule gets created.

Fig 9

Step 5: Click on refresh button near “Status”. Below screenshot shows the status of the rule as “Completed 0 out of 1”.

Fig 10

Step 6: After a few minutes, uninstall process is completed, which is shown below,

Fig 11

About Us

SecPod Technologies creates cutting edge products to ensure endpoint security. SecPod’s deep information security expertise

exceptionally positions the company to help solve complex endpoint security challenges. Headquartered in Bangalore with

operations in USA, SecPod’s products are deployed across diversified verticals.

Contact Us

Web: www.secpod.com Tel: +91-80-4121 4020

Email: info@secpod.com +1-918-625-3023