Forum link where Lenovo employees confirm the issue:
https://forums.lenovo.com/t5/Security-Malware/Potentially-Un...
And here's the money quote about the malware:
"Superfish Inc aka VisualDiscovery aka Similarproducts application will hijack ALL your secure webconnections (SSL/TLS) by using self signed root certificate authority, making it look legitimate to the browser"
