Broadband Tech > Security > Security > Unplug universal plug and play

Unplug universal plug and play

very good find bob!!!
--
Uh Pepsi is good

reply to Just Bob
Hmmmm....Seems to me that my port 5000 is Stealthed, and I still have UPnP running. Maybe it is because I have the "Generic Host Process for Win32 Services" set to have no Internet Server rights in ZoneAlarm Pro.

I am happy. I am secure.

But, you gotta' hand it to Steve. Always there to help the small guys like us. Thanks Steve.
--
WedgeAntilles250

[text was edited by author 2001-12-27 00:34:13]

My understanding is that if you have WinXP's firewall enabled you are safe from this vulnerability. However, to my knowledge, regardless of setting, perhaps aside from engaging the Internet Lock, ZoneAlarm leaves you vulnerable (don't know about TPF). You could be right about Generic Host Process Win32 Service, but I don't think so. Can anyone confirm?

The recommendations that I've seen indicate that it is advisable to disable the Universal Plug and Play Device Host and the SSDP Discovery Service. These services are not used presently, so it is safe to disable them.

;~*...Scotterpops

Thanks for the heads ups on >Universal Plug and Play Device Host and the SSDP Discovery Service ...Make sure it's Universal Plug and Play and not regular Plug and Play ...Otherwise you may have problems...

Edit;I have to agree Steve does some pretty good stuff...But why not just go into msconfig and turn off these services yourself...?...
[text was edited by author 2001-12-27 02:41:58]

reply to Just Bob
I'm glad to see someone making it easy. It's next to impossible to find how to disable Universal PNP on Microsoft's web site. I say "Next" to impossible because I haven't been able to find it but someone might have.

reply to Just Bob
Start-Run-services.msc Then just scroll down to each service and turn it off, But there is nothing wrong with Gibson's tool. And it should be used, by those not sure what or how to disable the service.

reply to Just Bob
Thanks Just Bob, I downloaded grc's little program and installed it under -start-tools&etc.-
--
Hey MA....call that 10 year old, this computer has done did what I told it to again!

reply to Just Bob
Hi Gang,

As several of you have said, my new little "UnPlug n' Pray" (UnPnP) app does nothing that a competent Windows user can't do for themselves. But I wouldn't want my mom poking around in XP's "Services" list.

Since I really do believe that Microsoft has made another huge mistake by running another Internet server in every Windows machine -- The last Internet server to be running in everyone's Windows machine was File and Printer Sharing. -- I wrote UnPnP on Christmas eve so that "moms everywhere" could safely turn it off if they were told to.

For what it's worth, I also just wrote another fun gizmo that you more technical guys here might get a kick out of. It is, also, no big deal, and it didn't take long to knock out, but you still might enjoy it:

»grc.com/id/IDServe.htm

All the best!

Hey thanks for the info.

I just took a look at your IDServe page... and think I'll give it a go later today.

Thanks.

reply to Just Bob
Steve Gibson!!!!!!

reply to Steve Gibson2

said by Steve Gibson:

---

, but you still might enjoy it:

»grc.com/id/IDServe.htm

All the best!

---

reply to Just Bob
Thanks Bob & Steve! I just sent the link to my mothers laptop. She will so happy that she did something besides email.
--
Try it my way? Then have someone show you the right way!

reply to Steve Gibson2

Hi Steve. Good to have you back. I was wondering, would it be possible to add Win ME to the list? I know, it's much easier to manually remove UPnP from ME but I think it's just as vulnerable as XP when it comes to UPnP. Unfortunately with all the attention being paid to XP these days, it seems to me that we're forgetting to emphasize that ME users should do the same. There's a huge number of people using ME and it may take a while before they move to XP. It would be nice if your application could do the same for Win ME users.
--
You can catch the Devil, but you can't hold him long.

said by Wildcatboy:

---

I was wondering, would it be possible to add Win ME to the list? I know, it's much easier to manually remove UPnP from ME but I think it's just as vulnerable as XP when it comes to UPnP. Unfortunately with all the attention being paid to XP these days, it seems to me that we're forgetting to emphasize that ME users should do the same. There's a huge number of people using ME and it may take a while before they move to XP. It would be nice if your application could do the same for Win ME users.

---

Glad to hear it Steve and thanks. I'm sure this will give the issue the publicity it needs.
--
You can catch the Devil, but you can't hold him long.

reply to Steve Gibson2
On behalf of all those "mothers" out here that don't want to muck with the registry, thanks, Steve. Also, I am now waiting with bad bated breath for the one that will work with non XP versions, as I am still running 98SE. Good to see you back, sir.
--
JKK

Age is a very high price to pay for my maturity. If I can't stay young, I can at least stay immature!

[text was edited by author 2001-12-27 18:15:01]

reply to Just Bob
UnPlug n' Pray now runs and does its job on *ANY* Windows platform.

It will also run correctly and confirm the presence or lack of presence of the UPnP system on Win95 and Windows 2000.

»grc.com/files/UnPnP.exe

I have not yet updated the companion web page to reflect this news (this is HOT off the press), but I believe that the version (v1.1) that's now on our server is fully functional. (I would love to have some quick testing and confirmations of that! )

Thanks for all your support guys. (And moms.)

I just tested it and it works great on XP, I had to use Active Ports, to make sure the program worked, and it does. I opened services, and then used your program to enable the plug N play, Then clicked refresh, they are switched from disabled to manual and from manual back to disabled. So the program works like a charm thanks for the program.

reply to Steve Gibson2
Works OK on Win2K