Tool to disable Intel AMT on Windows. Runs on both x86 and x64 Windows operating systems. Download:

DisableAMT.exe

DisableAMT.zip

On 02 May 2017, Embedi discovered "an escalation of privilege vulnerability in Intel® Active Management Technology (AMT), Intel® Standard Manageability (ISM), and Intel® Small Business Technology versions firmware versions 6.x, 7.x, 8.x 9.x, 10.x, 11.0, 11.5, and 11.6 that can allow an unprivileged attacker to gain control of the manageability features provided by these products".

Emedi has also released a technical paper about their discovery: Silent Bob is Silent (PDF)

Read also: Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Escalation of Privilege

Assigned CVE: CVE-2017-5689

Your machine may be vulnerable to hackers.

If you see any of these stickers or badges on your laptop, notebook or desktop, you are likely affected by this:

You may want to read: How To Find Intel® vPro™ Technology Based PCs

Simple. Download and run DisableAMT.exe, and it will do the work for you. This is based on the instructions provided by the INTEL-SA-00075 Mitigation Guide

When executing the tool, it will run quickly and when done, will present you with the following screen:

Type Y or N if you would also like to automatically disable (by renaming) the actual LMS.exe (Intel Local Management Service) binary. When finished, a logfile will open up. Reboot your machine at this point.

That's all!

The tool is simply written in batch, and has the necessary components inside to unconfigure AMT. The batch file was compiled to an executable using the free version of Quick Batch File Compiler, and subsequently packed with UPX to reduce filesize. Additionally, ACUConfig.exe and ACU.dll from Intel's Setup and Configuration Software package is included. You may find all these files in the src folder.

Please find hashes below:

No.

Probably.