The easy way to turn off Universal Plug-and-Play in Windows

From: Richard M. Smith (rmsat_private)
Date: Fri Dec 28 2001 - 08:47:20 PST

  • Next message: snsadvat_private: "[SNS Advisory No.47] DeleGate Cross Site Scripting Vulnerability" 

    Hi,

Steve Gibson of Gibson Research has just released an easy-to-use utility
for turning off Universal Plug-and-Play (UPNP) in Windows XP/ME/98.  The
utility, "UnPlug 'n Pray", is available for no charge at this download
page:

   http://grc.com/UnPnP/UnPnP.htm

This utility is a great tool for folks who would rather turn off UPNP
altogether on their Windows systems instead of having to keep up with a
steady stream of UPNP security patches from Microsoft.  

This tool also confirmed that the FBI is currently giving out incorrect
instructions on how to protect a Windows XP from the UPNP security
holes.  I followed the FBI instructions, but Steve's utility was still
needed to get the right XP services turned off.  The FBI/NIPC Web page
that needs to get fixed is located at:

   http://www.nipc.gov/warnings/advisories/2001/01-030-2.htm

Richard M. Smith
http://www.computerbytesman.com

    This archive was generated by hypermail 2b30 : Fri Dec 28 2001 - 10:47:11 PST