I have removed bmupdate.exe from c:\windows\system to f:\virusad, a
file that I believe to be a garbage repository from which viruses,
spy- and malware can do no harm. Does the computer need bmupdate or
will it work fine without it?
Can bmupdate do any harm from f:\virusad?

Hello vaac,

Thank you for your question.

bmupdate.exe might be ok and might not. As you will note here at Audit My PC:

http://www.auditmypc.com/process/bmupdate.asp

"...bmupdate.exe - Here is the scoop on Bookmark Updater. The big
question: what is bmupdate.exe and is it spyware, a trojan and if so,
how do I get rid of Bookmark Updater?

bmupdate.exe (Bookmark Updater) - Details

The bmupdate.exe process will check on the internet for available
updates for the drivers of your Visioneer scanner. If updates are
available it is used to manage the download and install of the
updates. If you are not experiencing any problems with your scanner
you can safely terminate this process..."

2-spyware.com says:

http://www.2-spyware.com/file-bmupdate-exe.html

File bmupdate.exe is related to adware BookmarkExpress.

So, there appear to be two common files with the same name. If you do
not have a Visioneer Scanner, most likely yours is the Adware version.

Spy Any .com says the following:

http://www.spyany.com/program/article_adw_rm_BookmarkExpress.html

"...BookmarkExpress is an adware that enables you to view your
bookmarks (such as the last time the site was visited or updated, and
its rating) from anywhere via Internet. It also provides search
function for finding news, products, discussions, Web sites and much
more.


How to Remove BookmarkExpress?

Use the following removal steps to remove this adware:

Open Windows Task Manager (press CTRL+ALT+DEL). 
From the process list, find and terminate the following application:

bmupdate.exe 

Open the Registry Editor (Click Start > Run, type 'regedit') .

Navigate to and delete the following registry key:

Delete registry values: 
HKEY_USERS\s-1-5-21-1647371527-919082819-4212676017-1003\software\microsoft\windows\currentv
ersion\run\bmupdate

Reboot the computer.

Open Windows Explorer, in the address bar, type %WinDir% to enter into
the Windows folder.

Delete the file: bmupdate.ini

Then delete the file bmupdate.exe from System32 directory..."


So this should rid this program from your computer. In worst case, if
you do have a Visoneer scanner, you can visit their website for
updates if you desire.

One last report from Pest Patrol for you:

http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453077913

"...BookmarkExpress 
 Overview

 Category

  Adware :  Software that brings ads to your computer. Such ads may or
may not be targeted, but are "injected" and/or popup, and are not
displayed within the form of an ad-sponsored application. Some Adware
may hijack the ads of other companies, replacing them with its own.
See also Spyware, Browser Helper Object.
  

Origins

   Date of Origin
  August, 2004..."

You might read their entire report and removal instructions as well.  
 
And last, moving the .exe is a good idea and likely can cause no harm
from there. But there are spyware and adware programs that do recreate
themselves if moved or deleted, so following removal instructions
rather than just moving is always a good idea.
  
 
Search Strategy:

bmupdate.exe


I trust my research has provided you with the answer you required. If
a link above should fail to work or anything require further
explanation or research, please do post a Request for Clarification
prior to rating the answer and closing the question and I will be
pleased to assist further.

Regards,

-=clouseau=-

---

Request for Answer Clarification by vaac-ga on 10 Feb 2005 13:45 PST

Your answer, while comprehensive, is too complicated for me to decide
wheter to remove or keep bmupdate. If I understood right there are 2
files having the same name "bmupdate", one which will alert me to any
update of visioneer (which I have). The other is a virus and spy- and
malware importer. Otherwise why such detailed instructions how to
remove it? How can I identify which is which since they have the same
name? Will keeping it open my computer to all sorts of undesirables
even though I have Norton Internet Security? Will deleting it rob me
of updates from Visioneer which I would otherwise receive?

---

Clarification of Answer by clouseau-ga on 10 Feb 2005 18:28 PST

Hello again vaac,

My take is that if the file bmupdate.exe is in the Windows (or WINNT)
/System32 directory, it is likely the spyware. At very worst case,
scanner software is updated infrequently and you can always check the
Visioneer site periodically to see if there are updates to your
scanner programs or drivers. I doubt you will miss removing this
program.

-=clouseau=-

In view of the uncertainties involving this question the answer is as
good as can be expected.

I think this is a very good answer. It is absolutely clear what it is
BMUPdate and how to remove it. The procedure and information is just
great. I don't understand why the person says "it is too complicated
to me to decide whether to remove or keep..": It has been explained
and spelled so clear!!!! Is this supposed to be a joke?
I also had the BMUpdate.exe process running in my system. It appeared
recently, and I also have installed recently the Visioneer driver. So,
it makes sense that it would appear to be from this. I searched the
Internet, and this is the best answer. I removed the abusive
application, following the procedure. The advise from closuseau is
clear and good. Thank you for this answer and don't mind if the person
who asked the question is kidding or if he/her just want you to take
this easy decision for he/her.