Intel Manageability Engine Firmware Recovery Agent
What is Intel Manageability Engine Firmware Recovery Agent?
Intel Active Management Technology (AMT) is hardware-based technology for remotely managing and securing PCs out-of-band. Intel AMT is hardware and firmware technology that builds certain functionality into business PCs in order to monitor, maintain, update, upgrade, and repair PCs. Intel AMT is part of the Intel Management Engine, which is built into PCs with Intel vPro technology. AMT is not intended to be used by itself; it is intended to be used with a software management application. It gives a management application (and thus, the system administrator who uses it) better access to the PC down the wire, in order to remotely and securely do tasks that are difficult or sometimes impossible when working on a PC that does not have remote functionalities built into it.
Overview
The most used version is 1.0.0.35342, with over 98% of all installations currently using this version. Upon installation and setup, it defines an auto-start registry entry which makes this program run on each Windows boot for all user logins. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. The main program executable is bootstrap.exe. The software installer includes 103 files and is usually about 18.36 MB (19,251,712 bytes).
Program details
URL: www.intel.com
Installation folder: C:\Program Files\intel\intel(r) me fw recovery agent\bin\html_docs\locale
Uninstaller: MsiExec.exe /X{A6C48A9F-694A-4234-B3AA-62590B668927}
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 18.36 MB
Language: English (United States)
Files installed by Intel Manageability Engine Firmware Recovery Agent
| Program executable: | bootstrap.exe |
| Name: | Intel Services Manager |
| Intel Services Manager Launcher |
| Signed by: | Intel® Services Manager |
| Path: | C:\Program Files\intel\intel(r) me fw recovery agent\bin\bootstrap.exe |
| MD5: | f493bc001d91a63fa18ac1156706d880 |
Additional files:
-
backendservice.dll - BackendServices (Intel Services Manager Plugin)
-
channeladapter.dll - ChannelAdapter (Intel Services Manager Library)
-
configurationmanager.dll - ConfigurationManager
-
configurationmanager64.dll
-
corepersistenceapi.dll - Intel Services Manager
-
crashreportsender.exe - Crash Report Sender
-
deviceprofile.dll
-
deviceprofileservice.dll - DeviceProfileService
-
downloadmanager.dll - DownloadManager
-
eventssender.dll
-
featurecontroller.dll
-
installeventproxy.dll
-
ismagent.exe
-
ismshutdowntool.exe
-
libeay32.dll (by The OpenSSL Project, http://www.openssl.org/) - The OpenSSL Toolkit (OpenSSL Shared Library)
-
libgsoap.dll
-
liveupdateutility.dll - LiveUpdateUtility
-
localmessage.dll - LocalMessage
-
localmessage64.dll
-
log4cplus.dll
-
logger.dll - Logger
-
logger64.dll
-
mefwrdsc.dll
-
meprovider.dll - Device Profile ME Provider
-
messagemediator.exe - Message Mediator
-
network.dll - Network
-
orchestrator.dll - Orchestrator
-
payload.dll - Payload
-
payload64.dll
-
policymanager.dll - PolicyManager
-
pserverplugin.dll
-
qtcore4.dll (by Nokia and/or its subsidiary(-ies)) - Qt4 (C++ application development framework.)
-
qtgui4.dll (by Nokia and/or its subsidiary(-ies))
-
qtnetwork4.dll
-
qtxml4.dll
-
sealing.dll - Sealing
-
selfupdatelauncher.exe
-
serializer.dll - Serializer
-
serializer64.dll
-
servicemanagerstarter.dll
-
servicemanagerstarter64.dll
-
serviceofferingmanager.dll - ServiceOfferingManager
-
sqlite3.dll
-
ssleay32.dll (by The OpenSSL Project, http://www.openssl.org/)
-
systeminfo.dll - SystemInfo
-
systemmonitor.dll - SystemMonitor
-
updateservice.dll - UpdateService
-
updateserviceproxy.dll - UpdateServiceProxy
-
updateserviceproxy64.dll
-
uuid.dll - UUID
-
uuid64.dll
-
zlib1.dll - zlib (zlib data compression library)
Behaviors exhibited
Scheduled Task
- bootstrap.exe is scheduled as a task with the class '{1FDB367E-A408-483B-897C-104348862415}' (runs on registration).
Scheduled Task (Boot/Login)
- bootstrap.exe is automatically launched at startup through a scheduled task named ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.xml.
2 Startup Files (All Users Run)
- bootstrap.exe is loaded in the all users (HKLM) registry as a startup file name 'ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon' which loads as "C:\Program Files\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe" --domain-id 4e00205a-2ab1-4423-8f77-cc25b82cde1d --caller winlogon-impersonate.
- ismagent.exe is loaded in the all users (HKLM) registry as a startup file name 'Intel AppUp(SM) center' which loads as "C:\Program Files\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4.
2 Windows Firewall Allowed Programs
- ismagent.exe is added as a firewall exception for 'C:\Program Files\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe'.
- bootstrap.exe is added as a firewall exception for 'C:\Program Files\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe'.
Resource utilization averages
Show technical details
| ismagent.exe |
| Memory: | 19.85 MB | |
| Total CPU: | 0.0000317376% | |
| Kernel CPU: | 0.00001005% | |
| User CPU: | 0.00002169% | |
| CPU cycles/sec: | 55,940 | |
| I/O reads/min: | 124 Bytes | |
| I/O writes/min: | 41 Bytes | |
How do I remove Intel Manageability Engine Firmware Recovery Agent?
You can uninstall Intel Manageability Engine Firmware Recovery Agent from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program Intel(R) Manageability Engine Firmware Recovery Agent, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove Intel Manageability Engine Firmware Recovery Agent.
OS VERSIONS
Win 10 57%
Win 7 0%
|
|
HOW IT STARTS
Automatically starts? Yes
(Found in the run registry)
|
|
USER ACTIONS
 |
Uninstall it 11%
Keep it 89%
|
|
Windows
Which Windows OS versions does it run on?
| Windows 10 |
57.27% |
|
| Windows 7 |
42.60% |
|
| Windows XP |
0.14% |
|
Which OS releases does it run on? |
| Windows 7 Home Premium |
24.88% |
|
| Windows 8.1 |
23.48% |
|
| Windows 10 Home |
8.41% |
|
| Windows 7 Ultimate |
7.78% |
|
| Windows 7 Professional |
7.70% |
|
| Windows 8 |
7.57% |
|
Geography
42.98% of installs come from the United States
Which countries install it?
| United States |
42.98% |
| United Kingdom |
4.82% |
| Germany |
4.52% |
| Brazil |
3.93% |
| France |
3.92% |
| Italy |
3.77% |
| Canada |
3.11% |
| Australia |
2.51% |
| Netherlands |
1.91% |
| India |
1.51% |
| Poland |
1.24% |
| Sweden |
1.18% |
| Spain |
1.10% |
| Norway |
1.03% |
PC manufacturers
What PC manufacturers (OEMs) have it installed?
| Samsung |
27.39% |
|
| Lenovo |
20.10% |
|
| ASUS |
17.83% |
|
| Toshiba |
12.22% |
|
| Acer |
7.02% |
|
| Dell |
5.96% |
|
| MSI |
4.41% |
|
| Hewlett-Packard |
2.85% |
|
| Medion |
1.66% |
|
| Intel |
0.56% |
|
Common models |
| LENOVO 20378 |
6.67% |
|
| Samsung 300E4C/300E5C/300... |
6.47% |
|
| LENOVO 20217 |
4.13% |
|
| Samsung 550P5C/550P7C |
3.23% |
|
| Dell XPS 8700 |
2.99% |
|
| ASUSTeK G75VW |
2.75% |
|
About Intel
Intel Corporation is the world's largest semiconductor chip maker and is the inventor of the x86 series of microprocessors found in most personal computers.
Publisher URL: www.intel.com