Not that this excuses Lenovo in any regard whatsoever, the removal instructions[1] Lenovo link to in their press release[2][3] includes the removal of a certificate.
[1] http://support.lenovo.com/us/en/product_security/superfish_u...
[2] http://news.lenovo.com/article_display.cfm?article_id=1929
[3] http://support.lenovo.com/us/en/product_security/superfish