Mchelper Calling Card
What is Mchelper Calling Card?
This is a white-labeled LogMeIn branded support and remote access utility of LogMeIn Rescue that uses a proprietary remote desktop protocol over transmitted via SSL that provides support technichians to connect to the remote desktop. The software it typically used to provide custom PC support to remotely view, diagnose and fix an end users computer.
Overview
During setup, the program creates a startup registration point in Windows in order to automatically start when any user boots the PC. Upon being installed, the software adds a Windows Service which is designed to run continuously in the background. Manually stopping the service has been seen to cause the program to stop functing properly. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. The setup package generally installs about 11 files and is usually about 7.65 MB (8,024,433 bytes).
Program details
URL: www.logmein.com
Installation folder: C:\Program Files\LogMeIn Rescue Calling Card\
Uninstaller: MsiExec.exe /I{C2835850-FCEB-4A1A-A213-57E7A9A8EC62}
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 7.65 MB
Files installed by Mchelper Calling Card
-
CallingCard.exe - LogMeIn Rescue Calling Card
-
ra64app.exe - LogMeIn Rescue GUI Launcher
-
rescue.dll - RemotelyAnywhere (RemotelyAnywhere DLL)
-
LMIRhook.000.dll - LogMeIn Rescue (LogMeIn Rescue Hook DLL)
-
rahook9x.dll
-
rarcc.dll - LogMeIn Rescue RARCC DLL
-
RescueWinRTLib.dll - LogMeIn Rescue WinRT DLL
-
Unattended.exe
-
unlock.dll
-
unlock64.dll
-
unicows.dll (by Microsoft) - Microsoft (R) Windows (R) 95, Windows (R) 98, and Windows (R) Millennium Operating Systems (Microsoft Layer for Unicode on Win9x Systems (MSLU))
Behaviors exhibited
Service
- CallingCard.exe runs as a service named 'LogMeIn Rescue (837712e7-f121-52b6-f34f-cfbc8948faba)' (LMIRescue_837712e7-f121-52b6-f34f-cfbc8948faba).
Startup File (User Run)
- CallingCard.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'LogMeInRescueCallingCard' and executes as "C:\Program Files\LogMeIn Rescue Calling Card\CallingCard.exe".
Startup File (User Run Once)
- CallingCard.exe is loaded once in the current user (HKCU) registry as a startup file name '226_10354972239988' which loads as "C:\users\user\appdata\Local\LOGMEI~1\LMIR0001.tmp_r.bat".
Startup File (All Users Run)
- CallingCard.exe is loaded in the all users (HKLM) registry as a startup file name 'Allin1Convert Search Scope Monitor' which loads as "C:\Program Files2\ALLIN1~2\bar\1.bin\8hsrchmn.exe" /m=2 /w /h.
Windows Firewall Allowed Program
- CallingCard.exe is added as a firewall exception for 'C:\Program Files\LogMeIn Rescue Calling Card\CallingCard.exe'.
How do I remove Mchelper Calling Card?
You can uninstall Mchelper Calling Card from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program Mchelper Calling Card, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove Mchelper Calling Card.
OS VERSIONS
Win 7 (SP1) 63%
Win 10 38%
|
|
HOW IT STARTS
Automatically starts? Yes
(Found in the run registry)
|
|
USER ACTIONS
 |
Uninstall it 50%
Keep it 50%
|
|
Windows
Which Windows OS versions does it run on?
| Windows 7 |
62.50% |
|
| Windows 10 |
37.50% |
|
Which OS releases does it run on? |
| Windows 7 Home Premium |
62.50% |
|
| Windows 10 Pro |
12.50% |
|
| Windows 8.1 |
12.50% |
|
| Windows 10 Home |
12.50% |
|
Geography
64.29% of installs come from the United States
Which countries install it?
| United States |
64.29% |
| United Kingdom |
28.57% |
| Australia |
7.14% |
PC manufacturers
What PC manufacturers (OEMs) have it installed?
| Hewlett-Packard |
57.14% |
|
| GIGABYTE |
14.29% |
|
| Acer |
14.29% |
|
| ASUS |
14.29% |
|
Common models |
| Hewlett-Packard Presario ... |
14.29% |
|
| Hewlett-Packard p7-1446s |
14.29% |
|
| HP Pavilion dv5 Notebook ... |
14.29% |
|
| HP Compaq 8000 Elite SFF ... |
14.29% |
|
| Gigabyte G41MT-D3 |
14.29% |
|
| eMachines eME732Z |
14.29% |
|
About LogMeIn
LogMeIn provides software as a service-based (SAAS) remote connectivity, collaboration, and support solutions to businesses and consumers.
Publisher URL: www.logmein.com