Larry Rescue
Overview
Larry Rescue is a program developed by LogMeIn. The most used version is 7.7.581, with over 98% of all installations currently using this version. Upon installation, it defines an auto-start registry entry which allows the program run on each boot for the user which installed it. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. The software installer includes 16 files and is usually about 7.45 MB (7,814,982 bytes). In comparison to the total number of users, most PCs are running the OS Windows 7 (SP1) as well as Windows XP. The distribution of this has mostly been seen in the United States.
Program details
URL: www.logmein.com
Installation folder: C:\Program Files\LogMeIn Rescue Calling Card\
Uninstaller: MsiExec.exe /I{C2835850-FCEB-4A1A-A213-57E7A9A8EC62}
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 7.45 MB
Files installed by Larry Rescue
-
CallingCard.exe - LogMeIn Rescue Calling Card
-
ra64app.exe - LogMeIn Rescue GUI Launcher
-
rescue.dll - LogMeIn Rescue Calling Card DLL
-
LMIRhook.000.dll - LogMeIn Rescue (LogMeIn Rescue Hook DLL)
-
rahook.dll
-
rahook9x.dll
-
rarcc.dll - LogMeIn Rescue RARCC DLL
-
RescueWinRTLib.dll - LogMeIn Rescue WinRT DLL
-
Unattended.exe
-
unlock.dll
-
unlock64.dll
Behaviors exhibited
Service
- CallingCard.exe runs as a service named 'LogMeIn Rescue (837712e7-f121-52b6-f34f-cfbc8948faba)' (LMIRescue_837712e7-f121-52b6-f34f-cfbc8948faba).
Startup File (User Run)
- CallingCard.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'LogMeInRescueCallingCardskunb65' and executes as "C:\Program Files\LogMeIn Rescue Calling Card\kunb65\CallingCard.exe".
Startup File (User Run Once)
- CallingCard.exe is loaded once in the current user (HKCU) registry as a startup file name '*LogMeInRescue' which loads as "C:\Program Files\LogMeIn Rescue Calling Card\CallingCard.exe" -runonce reboot.
Windows Firewall Allowed Program
- CallingCard.exe is added as a firewall exception for 'C:\Program Files\LogMeIn Rescue Calling Card\CallingCard.exe'.
How do I remove Larry Rescue?
You can uninstall Larry Rescue from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program Larry Rescue, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove Larry Rescue.
PC BRAND OF CHOICE
100%
Hewlett-Packard
|
|
OS VERSIONS
Win 7 (SP1) 75%
Win XP 25%
|
|
WHEN IT STARTS
Auto-starting? Yes
(Found in the run registry)
|
Windows
Which Windows OS versions does it run on?
| Windows 7 |
75.00% |
|
| Windows XP |
25.00% |
|
Which OS releases does it run on? |
| Windows 7 Home Premium |
50.00% |
|
| Windows 7 Professional |
25.00% |
|
| Microsoft Windows XP |
25.00% |
|
Geography
100.00% of installs come from the United States
Which countries install it?
About LogMeIn
LogMeIn provides software as a service-based (SAAS) remote connectivity, collaboration, and support solutions to businesses and consumers.
Publisher URL: www.logmein.com