Beware of cheap PC hardware -Spyware in drivers! (Visioneer)

[Ichinisan]

I bought a Visioneer USB 5820 flatbed scanner for $30 from a local closeout store because I needed to scan some receipts.

I immediately visited Visioneer's website (www.visioneer.com) and downloaded the driver instead of using the installation CD-ROM, which could contain outdated drivers.
http://www.visioneer.com/Support/flatbed/5800downloads.asp

Strangely, there was no privacy statement or user agreement on the Website. Even more strange, the installer does not have a "Continue? Yes/No" prompt, and fully installs itself with no license agreement or anything whatsoever. Basically, once you double-click the executable file, it installs itself completely without user input.

I would overlook these issues, but the driver contains spyware! Normally, a shady company would include a vague cryptic mention of their right to install spyware on your machine in the end-user license agreement. Visioneer apparently does not even have this tiny shred of respect for their end-users.

Spybot Search & Destroy:

Company: -
Product: BookmarkExpress
Threat: Discontinued adware, but update server still available

Company product URL: http://upgrade.bookmarkcentral.com/

Functionality
Bookmark manager coming with scanner drivers

Description
Bookmark manager means that their company can manage your bookmarks and show you ads. Tracks using GUID.

It is absolutely unacceptable for any respectable manufacturer in our time to behave as Visioneer has. They should be sued.

Is there a way to monitor the installation and determine every function of the installer so that a clean installer can be created? Basically, I'll need to monitor which DLL's are registered with the operating system and which INF files are required, and where those files must be placed. I'll also need to log any registry changes. Does such a program already exist (specifically designed for reverse-engineering installation packages)?

I'm going to format my system soon and re-install everything anyway, so I may as well try to isolate the files and install my scanner the "clean" way next time.

 

[tiap]

Don't get in a tizzy.
Download Spybot search and destroy. It will clean your complete system of all this spyware etc.
Download Spyblaster. Once your system is clean it will prevent spyware.
Buy and download artscanpro by jetsoft. It will make your scanner perform like a $1000.00 one.
Good luck

 

[Ichinisan]

Originally posted by: Ichinisan
...
Spybot Search & Destroy:

...

It is absolutely unacceptable for any respectable manufacturer in our time to behave as Visioneer has. They should be sued.
...

Originally posted by: tiap
Don't get in a tizzy.
Download Spybot search and destroy. It will clean your complete system of all this spyware etc....

As my post mentions, Spybot S&D is the application that identified the spyware. I don't trust Spybot to totally remove everything, because the database is maintained by human beings. Human beings make mistakes. No one knows for certain everything that was changed by the spyware. Spybot S&D still identifies a security exploit on freshly updated system, which would have been patched by Microsoft years ago (http://forums.anandtech.com/messageview.cfm?catid=27&threadid=1195226&FTVAR_MSGDBTABLE=).

 

[Ionizer86]

Ichinisan, thanks very much for the heads up. I hooked up the scanner, and with XP's native driver and wizard, it worked well. After I installed the online package (I wanted ot try out the scan to print feature), I found it very bloated and nasty, so I sysrestored.

Well what do you know, now every time I prescan, the thing gets stuck at ~40% through. And it's not a hardware problem since the scanner works fine on my bro's PC with the native XP driver and wizard.

Visioneer software blows.

 

[klah]

They are on my list right below Belkin now. There are plenty of companies out there who sell products that don't try to force their advertisements on you.

 

[Wolfsraider]

Originally posted by: Ichinisan

Originally posted by: Ichinisan
...
Spybot Search & Destroy:

...

It is absolutely unacceptable for any respectable manufacturer in our time to behave as Visioneer has. They should be sued.
...

Originally posted by: tiap
Don't get in a tizzy.
Download Spybot search and destroy. It will clean your complete system of all this spyware etc....

As my post mentions, Spybot S&D is the application that identified the spyware. I don't trust Spybot to totally remove everything, because the database is maintained by human beings. Human beings make mistakes. No one knows for certain everything that was changed by the spyware. Spybot S&D still identifies a security exploit on freshly updated system, which would have been patched by Microsoft years ago (http://forums.anandtech.com/messageview.cfm?catid=27&threadid=1195226&FTVAR_MSGDBTABLE=).

could be it was overlooked,they are human

could be they used ads at one time,decded it wasn't accepted.left it in to save money,rather than re-implement it later when people were more used to it.

is it right?

well it's untried,but thought provoking

is it any worse than what we deal with now?no
to sue them you'd probably have to prove damage.


id just remove it.if you don't support this behavior,don't buy their products.
if you can't stand the thought of using it,sell it,and research a better(ad free)product

mike

 

[tiap]

I agree and sympathize with your view. I felt that way for a long time. The problem is these days if you want to keep your system pristine, it becomes a full time job and you can manage your system more than you use it. I used to make drive image backups before installing anything, used regedit to moniter and delete the registry etc. But I found that with trend micro for the net, spybot, spyblaster, trueimage and xp system restore, I have no problems that can't be repaired in 10 minutes. We just have to accept the fact that all this other unwanted mal stuff is a way of life these days. Also, do try artscan pro. You'll be amazed.

 

[Wolfsraider]

first time ive heard of spyblaster ,thanks

mike

 

[Ichinisan]

Originally posted by: Wolfsraideris it any worse than what we deal with now?no
to sue them you'd probably have to prove damage.


id just remove it.if you don't support this behavior,don't buy their products.
if you can't stand the thought of using it,sell it,and research a better(ad free)product

mike

The only reason that standard virus scanners are not allowed to detect/remove spyware is that they are supposed to be mentioned in the EULA of the host installer. I'm sure that the company behind BMUpdate provided a paragraph of text for Visioneer to include in the EULA. Visioneer should not only be boycotted, but they should be sued for taking advantage of their customers. Basically, an example should be set before other hardware manufacturers get carried away.

 

[Ionizer86]

Good thing I only donated to them $10 for the scanner I bought 😉

Now I get why some person reviewing the 7100 said the hardware was good but the software did not work well.

 

[Wolfsraider]

Originally posted by: Ichinisan

Originally posted by: Wolfsraideris it any worse than what we deal with now?no
to sue them you'd probably have to prove damage.


id just remove it.if you don't support this behavior,don't buy their products.
if you can't stand the thought of using it,sell it,and research a better(ad free)product

mike

The only reason that standard virus scanners are not allowed to detect/remove spyware is that they are supposed to be mentioned in the EULA of the host installer. I'm sure that the company behind BMUpdate provided a paragraph of text for Visioneer to include in the EULA. Visioneer should not only be boycotted, but they should be sued for taking advantage of their customers. Basically, an example should be set before other hardware manufacturers get carried away.

so your saying that spybot doesnt look at drivers?i never thought what might happen there sorry

i was just saying nothing is sacred when it comes to adds,doesn't seem like much will change

mike
edit😀idn't know about the belkin ads either

 

[Ichinisan]

Originally posted by: Ionizer86
Good thing I only donated to them $10 for the scanner I bought 😉

Now I get why some person reviewing the 7100 said the hardware was good but the software did not work well.

Even without spyware, their software would suck ass. I just use WinXP's scanner wizzard. The "hands-free" installer does not have any options at all, certainly not a "drivers only" option 🙁

Originally posted by: Wolfsraider
so your saying that spybot doesnt look at drivers?i never thought what might happen there sorry

i was just saying nothing is sacred when it comes to adds,doesn't seem like much will change

mike
edit😀idn't know about the belkin ads either

That's not what I meant. Spybot S&D is not a virus scanner, it is a spyware scanner. The creators of virus-scanning software would be sued by the spyware companies if they identified spyware as malicious software. Spybot does scan drivers, and it is the application that found identified the spyware (see the quote from Spybot S&D in my first post).

I was saying that the spyware issue is a big deal in the case of Visioneer because they have no license agreement or privacy statement.

 

[Wolfsraider]

how to fix

Errors Involving BMUpdate

Symptom:

After installing a Visioneer OneTouch Scanner the computers Firewall software on the computer is locking or giving errors involving BMUpdate.


Cause:

When installing a newer model Visioneer OneTouch driver a file called BMUpdate.exe is installed. This file is used by Visioneer to provide technical support and update announcements to customers once a unit is installed, and is not neccessary for the TWAIN driver to function properly.


Solution:

Since the BMUpdate file is not needed for the Scanner to function properly, this file can be deleted. To do so, please do the following:

1. Click on Windows Start button
2. Click on Find/Search.
3. Select All/Files or Folders
4. In the named field type in "BMUpdate"
5. Verify the look in is searching "C:\"
6. Click on Find/Search Now.
7. Once the file is found on the C:\ Drive, right click on the file BMUpdate then select "Delete" from the drop down menu.
8. Close the find window
9. Empty Windows Recycle Bin
10. Reboot the computer.

The BMUpdate file will now be gone.

Please Note: When the scanners driver is reinstalled this process will need to be done again since the BMUpdate file will reinstall.

 

[Ichinisan]

H4w! They want you to believe that bull. How could a bookmark manager "enhance" their tech support?