Jump to content



Photo

Bonjour Service Removal


  • Please log in to reply
64 replies to this topic

#1 WastedJoker

WastedJoker

    Rampant Sciolist

  • 3,603 posts
  • Joined: 31-December 05
  • Location: Sunderland, UK

Posted 19 April 2008 - 23:23

Hello,

I've suffered a few nasty experiences when trying to remove the Bonjour Service which is installed by Adobe/Apple products. Unlike a lot of services, the Bonjour Service has many nasty tentacles buried into critical system/registry settings and removing it without following the below instructions can do a few things like:

1. Disabling your network connection fatally (can only be resolved with a WinSock fix and only under certain circumstances)
2. Prevent the start-up of many important Windows Services like Event Viewer or System Event Notification. This has a drastic impact on your start-up/shut-down times.

Basically, removing the Bonjour Service can be an utter nightmare and the below instructions are the only ones that work 100% for me.

To remove the Bonjour Service:

  • Stop Bonjour Service by opening a command prompt (remember to open the command prompt with Administrator privileges in Vista) and type:

    sc stop “bonjour service”

  • Once that is done, in the same command prompt typsc delete “bonjour service”e”

  • Now we need to disable the Bonjour socket driver.

  • Start regedit.exe (with Administrator privileges in Vista) and go to tHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000004ze (please note: the final digit in this key may vary depending on your circumstances - look through all the entries under Catalog_Entries - the key you're dealing with shoulLibraryPath = C:\Program Files\Bonjour\mdnsNSP.dll)P.dll)l)

  • Within that key find the entry:

    Enabled=REG_DWORD:00000001 - change it from 1 to 0.

  • Exit out of the command prompt and reboot your PC.

  • Once you have logged back in, delete the C:\Program Files\Bonjour (with the files mDNSResponder.exe and mdnsNSP.dll).

There you have it - these instructions will work for Windows XP and Vista.


#2 +Neo003

Neo003

    Those who believe in telekinetics, raise my hand.

  • 8,490 posts
  • Joined: 12-June 03

Posted 19 April 2008 - 23:32

(Y) Thanks it worked great, you're right the catalog entry mine was in 0x007.

#3 SMH

SMH

    Click here for more info...

  • 229 posts
  • Joined: 05-April 03
  • Location: Preston, UK

Posted 20 April 2008 - 20:00

Worked like a charm! Mine was also in 0x007.

Thanks dude :whistle:

#4 sTIMPZ

sTIMPZ

    Curbside Prophet

  • 261 posts
  • Joined: 11-January 05
  • Location: Northern Virginia

Posted 20 April 2008 - 20:11

What exactly does the bonjour service do? And since you're removing it I'm assuming that it is not necessary in order for Adobe/Apple software to run correctly?

#5 Cosmin

Cosmin

    Graphics & Engineering

  • 4,216 posts
  • Joined: 12-October 02
  • Location: Europe

Posted 20 April 2008 - 20:14

useful indeed .

#6 1941

1941

    Banned

  • 18,175 posts
  • Joined: 17-July 06

Posted 20 April 2008 - 22:01

What exactly does the bonjour service do? And since you're removing it I'm assuming that it is not necessary in order for Adobe/Apple software to run correctly?

Adobe newest Creative Suite 3 installs Apple’s Bonjour service even if you don’t install Version Cue. Its main goal is to provide zero-configuration connectivity between Version Cue server and the suite’s applications.

When installed by Creative Suite 3 applications, the name used by Bonjour for Windows in the services control panel is:

##Id_String2.6844F930_1628_4223_B5CC_5BB94B879762##


http://www.ajuaonlin...onjour-service/

#7 gahbahj

gahbahj

    Resident One Post Wonder

  • 1 posts
  • Joined: 08-February 05

Posted 22 April 2008 - 19:29

i recently installed adobe dreamweaver cs3 and found this was installed too. apparantly all cs3 products install this without asking, whether u need/want it or not. after reading a bit i found some interesting discussion & the source of the removal script here

http://blogs.adobe.c...oesnt_inst.html

i guess the thing even talks to 2o7.net (a data collector) thru a deceptive IP looking site name 192.168.112.2o7.net.

i dont use cue servers, so i removed it. here's the script if u dont want to wander the net looking - save as a .bat file

echo Bounjour service killer...(cmd-bat file)

"%ProgramFiles%\Bonjour\mDNSResponder.exe" -remove
sc stop "Bonjour Service"
sc delete "Bonjour Service"
sc stop "B"
sc delete "B"

regsvr32 /u/s "%ProgramFiles%\Bonjour\mdnsNSP.dll"

reg delete "HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000004" /va /f
reg delete "HKLM\SYSTEM\ControlSet003\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000004" /va /f
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000004" /va /f
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\864614E012A08774EB1646AA5AEB0193" /va /f
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\413EF6387A735094090FFA2EF513C53A" /va /f
reg delete "HKLM\SYSTEM\ControlSet001\Services\Bonjour Service" /va /f
reg delete "HKLM\SYSTEM\ControlSet001\Services\Eventlog\Application\Bonjour Service" /va /f
reg delete "HKLM\SYSTEM\ControlSet003\Services\Bonjour Service" /va /f
reg delete "HKLM\SYSTEM\ControlSet003\Services\Eventlog\Application\Bonjour Service" /va /f
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\Bonjour Service" /va /f
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Bonjour Service" /va /f
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List" /v "D:\\Program Files\\Bonjour\\mDNSResponder.exe" /f
reg delete "HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List" /v "D:\\Program Files\\Bonjour\\mDNSResponder.exe" /f
reg delete "HKLM\SYSTEM\ControlSet003\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List" /v "D:\\Program Files\\Bonjour\\mDNSResponder.exe" /f

ren "%ProgramFiles%\Bonjour\mdnsNSP.dll" "%ProgramFiles%\Bonjour\virus.vir"
del /q/f "%ProgramFiles%\Bonjour\*.*"
rd /q "%ProgramFiles%\Bonjour"

echo ...
echo please, reboot your computer and 
echo then you can delete the folder:
echo "%ProgramFiles%\Bonjour"
pause


#8 OP WastedJoker

WastedJoker

    Rampant Sciolist

  • 3,603 posts
  • Joined: 31-December 05
  • Location: Sunderland, UK

Posted 22 April 2008 - 19:51

i recently installed adobe dreamweaver cs3 and found this was installed too. apparantly all cs3 products install this without asking, whether u need/want it or not. after reading a bit i found some interesting discussion & the source of the removal script here

http://blogs.adobe.c...oesnt_inst.html

i guess the thing even talks to 2o7.net (a data collector) thru a deceptive IP looking site name 192.168.112.2o7.net.

i dont use cue servers, so i removed it. here's the script if u dont want to wander the net looking - save as a .bat file

echo Bounjour service killer...(cmd-bat file)

"%ProgramFiles%\Bonjour\mDNSResponder.exe" -remove
sc stop "Bonjour Service"
sc delete "Bonjour Service"
sc stop "B"
sc delete "B"

regsvr32 /u/s "%ProgramFiles%\Bonjour\mdnsNSP.dll"

reg delete "HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000004" /va /f
reg delete "HKLM\SYSTEM\ControlSet003\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000004" /va /f
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000004" /va /f
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\864614E012A08774EB1646AA5AEB0193" /va /f
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\413EF6387A735094090FFA2EF513C53A" /va /f
reg delete "HKLM\SYSTEM\ControlSet001\Services\Bonjour Service" /va /f
reg delete "HKLM\SYSTEM\ControlSet001\Services\Eventlog\Application\Bonjour Service" /va /f
reg delete "HKLM\SYSTEM\ControlSet003\Services\Bonjour Service" /va /f
reg delete "HKLM\SYSTEM\ControlSet003\Services\Eventlog\Application\Bonjour Service" /va /f
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\Bonjour Service" /va /f
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Bonjour Service" /va /f
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List" /v "D:\\Program Files\\Bonjour\\mDNSResponder.exe" /f
reg delete "HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List" /v "D:\\Program Files\\Bonjour\\mDNSResponder.exe" /f
reg delete "HKLM\SYSTEM\ControlSet003\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List" /v "D:\\Program Files\\Bonjour\\mDNSResponder.exe" /f

ren "%ProgramFiles%\Bonjour\mdnsNSP.dll" "%ProgramFiles%\Bonjour\virus.vir"
del /q/f "%ProgramFiles%\Bonjour\*.*"
rd /q "%ProgramFiles%\Bonjour"

echo ...
echo please, reboot your computer and 
echo then you can delete the folder:
echo "%ProgramFiles%\Bonjour"
pause



That guide relies on the Name Catalog in your registry being 4. As posters above have said, theirs has been 7.

#9 The_Decryptor

The_Decryptor

    STEAL THE DECLARATION OF INDEPENDENCE

  • 19,146 posts
  • Joined: 28-September 02
  • Location: Sol System
  • OS: iSymbian 9.2 SP24.8 Mars Bar

Posted 22 April 2008 - 20:28

...
i guess the thing even talks to 2o7.net (a data collector) thru a deceptive IP looking site name 192.168.112.2o7.net.
...

That's something else entirely.

Unless configured otherwise, Bonjour only works over your local network.

#10 -KJ

-KJ

    ٩(●̮̮̃•̃)۶ 

  • 3,450 posts
  • Joined: 21-April 08
  • Location: Texas

Posted 23 April 2008 - 08:22

I've been wondering what this Bonjour thing was, but never actually cared enough to look into it.
But I do care enough to get rid of it now, thanks to your easy instructions.

#11 funkycop

funkycop

    sex addict

  • 152 posts
  • Joined: 02-June 03
  • Location: france

Posted 23 April 2008 - 15:25

Thanks , I was trying to erase this service with no end, great !!

#12 Digital Monster

Digital Monster

    Neowinian

  • 10 posts
  • Joined: 29-May 08

Posted 30 May 2008 - 19:02

Thanks for posting this. I had actually reformated my system because Bonjour had killed my net connection. It wasn't until the second time around I had learned to refresh WinSock...sigh. At least this will fix that problem from happening again.

#13 SakuraKira

SakuraKira

    Neowinian

  • 504 posts
  • Joined: 14-May 06
  • Location: Seattle, WA

Posted 31 May 2008 - 01:43

Did you ever try just preventing the service from starting in the first place, in the Services.msc control panel? It gets installed with iTunes now, and I just disable it.

#14 revvo

revvo

    the most interesting man in the world

  • 7,343 posts
  • Joined: 07-March 04
  • Location: Montreal, Canada

Posted 31 May 2008 - 23:20

I actually removed the whole entry at first which was for me Catalog_Entries\000000000005.

I rebooted and I was like WTF, I had no internet, no sound, no visual styles. I go back and there's Num_Catalog_Entries which I reduced by one at NameSpace_Catalog5

fiew! :cool:

#15 virgo89

virgo89

    I'm not superstitious, I'm just a little stiticous

  • 2,967 posts
  • Joined: 16-November 05

Posted 03 June 2008 - 23:28

I have this service too, but it does not bother me. Don't fix it if it ain't broke.



Click here to login or here to register to remove this ad, it's free!