Skip to main content

What is mDNSResponder.exe / Bonjour

 

What is mDNSResponder.exe / Bonjour and How Can

 

I Uninstall or Remove It? 

 

 

You are no doubt reading this article because you’ve noticed the mDNSResponder.exe process 
running in Task Manager, you don’t remember installing it, and it doesn’t show up in the 
Add/Remove
programs in Control Panel. So what is it, and how do we get rid of it?

image 

What is mDNSResponder.exe or Bonjour?

The mDNSResponder.exe process belongs to the Bonjour for Windows service, which
is Apple’s “Zero Configuration Networking” application, typically installed 
automatically
by iTunes. If you’ve ever wondered how one iTunes install can talk to another on the 
same local network, Bonjour is what actually does this behind the 
scenes.
Don’t use iTunes? You aren’t alone, and that’s not the only way that Bonjour gets installed
on your computer. It’s also bundled in a whole bunch of other software, like Pidgin, Skype,
and Safari, and used to connect clients together on the same 
network.
It’s implemented as a Windows Service, which you can see if you head into the services panel
(or just type services.msc into the start menu search box). 
You can stop it from here anytime.

image 

The whole problem we have is that it generally doesn’t show up in 
Add / Remove Programs, 
so you can’t get rid of it through any normal methods. Thankfully
you can still 
remove mDNSResponder.exe if you really want to, and it will simply limit some 
of the 
functionality in the apps that might rely on it.

Important: Don’t remove Bonjour if you use iTunes to share libraries, or any other feature
from an application that relies on it.

How Do I Remove It?

First, it should be noted that you can disable Bonjour without necessarily removing it—just head
into the Services panel, double-click on the service, and change the Startup type 
to Disabled.

image 
This is probably your best bet if you don’t really want to break anything—if you have problems you 
can always re-enable it.

Alright, How Do I Really Remove It?

Let’s get down to business. If you’re absolutely sure you want to remove it, it’s really pretty simple.
Open up a command prompt in administrator mode (right-click and choose Run as Administrator),
and then change into the installation directory, usually the following:
\Program Files\Bonjour
If you are using Vista or Windows 7 x64 edition, you’ll need to head into the Program Files (x86) folder instead. Now that you are there, type in the following command to see the options:
mDNSResponder.exe /?

image 
Ah, so now we know what to do to remove it! Simply type in the following:
mDNSResponder.exe –remove
You’ll get a message saying that the service has been removed. (Note again that you need an Administrator mode command prompt)

image 
You’ll want to also disable the DLL file in the directory by renaming it to something else:
ren mdnsNSP.dll mdnsNSP.blah
You should be able to actually remove that entire directory if you really want to.

Wait, How Do I Enable It Again?

Oh, so your favorite application broke? No matter, you can easily re-install the Bonjour service
with the following command:
mDNSResponder.exe -install

But I Deleted It!

See, you really shouldn’t delete things until you are sure they aren’t useful anymore. That’s why renaming is a good thing. Thankfully you can simply head over to Apple’s page and 
install Bonjour again.

Comments

Popular posts from this blog

Defacing Sites via HTML Injections (XSS)

Defacing Sites via HTML Injections Defacing Sites via HTML Injections What Is HTML Injection: "HTML Injection" is called as the Virtual Defacement Technique and also known as the "XSS" Cross Site Scripting. It is a very common vulnerability found when searched for most of the domains. This kind of a Vulnerability allows an "Attacker" to Inject some code into the applications affected in order to bypass access to the "Website" or to Infect any particular Page in that "Website". HTML injections = Cross Site Scripting, It is a Security Vulnerability in most of the sites, that allows an Attacker to Inject HTML Code into the Web Pages that are viewed by other users. XSS Attacks are essentially code injection attacks into the various interpreters in the browser. These attacks can be carried out using HTML, JavaScript, VBScript, ActiveX, Flash and other clinet side Languages. Well crafted Malicious Code can even hep the ...

Linux Systems Performance/Observability (BPF (bpfcc-tools), BCC Tools

  Linux System Performance/Observability Tools Linux Systems Performance/Observability (BPF (bpfcc-tools), BCC Tools Assuming you have Linux Server in place and have the required BPF aka BCC related packages installed on the system(s) for the required Linux distribution. BPF(eBPF) aka BCC Tools (bpfcc-tools) : BPF, which originally stood for Berkley Packet Filter is the dynamic tracing tools for Linux Systems.  BPF initially used for the speeding up for the tcpdump expressions and since then it has been know as the extended Berkley packet Filter (eBPF).  Its new uses are Tracing Tools where it provides programmability for the BPF Compiler Collection (BCC) and bpftrace front ends .   Example: execsnoop, biosnoop etc is a BCC Tool. When facing production performance crisis these such list of tools comes handy to trace and fix the issue. However, it requires certain KERNEL level config options to be enabled such as CONFIG_FTRACE, CONFIG_BPF. Profiling tools typically re...

EKS Cluster and Create CSI Driver to store credentials in AWS Secrets Manager via SecretProviderClass

EKS Cluster | CSI Driver | SecretProviderClass | AWS Secrets Manager Setup EKS Cluster and Manage Credentials at runtime using CSI driver using SecretProviderClass and Secrets Manager Assuming you have Configured/Installed AWS CLI, EKSCTL, KUBECTL, HELM. CSI Basic Information: CSI (Container Storage Interface) widely used as a Storage Technology. Created by Google | Mesosphere | Docker.  It has two two Plugins one runs on the Master Node (Centralized Controller Plugin) and another one on Worker Nodes (Decentralized headless Node Plugin).  CSI communication protocol is gRPC.   The communication between Container Orchestration to Controller Plugin (Master) and to Node Plugin (Worker Node) happens using gRPC .  CSI Drivers : vendor specific compiled into Kubernetes/openshift binaries. To use a CSI driver, a StorageClass needs to be assigned first.  The CSI driver is then set as the Provisioner for the Storage Class. CSI drivers provide three main service...