Provenir Employee Support
What is Provenir Employee Support?
Provenir Employee Support is a LogMeIn branded computer support and remote access product that uses a proprietary remote desktop protocol that is transmitted via SSL. This allows support technichians to provide remote based customer support services. The service connects the remote desktop and the local computer using SSL over TCP or UDP and utilizing NAT traversal techniques to achieve peer-to-peer connectivity when available.
Overview
It adds registry entry for the current user which will allow the program to automatically start each time it is rebooted. Upon being installed, the software adds a Windows Service which is designed to run continuously in the background. Manually stopping the service has been seen to cause the program to stop functing properly. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. The setup package generally installs about 7 files.
Program details
URL: www.logmein.com
Installation folder: C:\Program Files\LogMeIn Rescue Calling Card\
Uninstaller: MsiExec.exe /I{C2835850-FCEB-4A1A-A213-57E7A9A8EC62}
(The Windows Installer is used for the installation, maintenance, and removal.)
Files installed by Provenir Employee Support
-
CallingCard.exe - LogMeIn Rescue Calling Card
-
ra64app.exe - LogMeIn Rescue GUI Launcher
-
rescue.dll - RemotelyAnywhere (RemotelyAnywhere DLL)
-
rahook.dll - LogMeIn Rescue (LogMeIn Rescue Hook DLL)
-
rahook9x.dll
-
rarcc.dll - LogMeIn Rescue RARCC DLL
-
unicows.dll (by Microsoft) - Microsoft (R) Windows (R) 95, Windows (R) 98, and Windows (R) Millennium Operating Systems (Microsoft Layer for Unicode on Win9x Systems (MSLU))
Behaviors exhibited
Service
- CallingCard.exe runs as a service named 'LogMeIn Rescue (837712e7-f121-52b6-f34f-cfbc8948faba)' (LMIRescue_837712e7-f121-52b6-f34f-cfbc8948faba).
Startup File (User Run)
- CallingCard.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'LogMeInRescueCallingCard' and executes as "C:\Program Files\LogMeIn Rescue Calling Card\CallingCard.exe".
Startup File (User Run Once)
- CallingCard.exe is loaded once in the current user (HKCU) registry as a startup file name '*LogMeInRescue' which loads as "C:\Program Files\LogMeIn Rescue Calling Card\CallingCard.exe" -runonce reboot.
Windows Firewall Allowed Program
- CallingCard.exe is added as a firewall exception for 'C:\ATSCallingCard\CallingCard.exe'.
How do I remove Provenir Employee Support?
You can uninstall Provenir Employee Support from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program Provenir Employee Support, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove Provenir Employee Support.
WHEN IT STARTS
Auto-starting? Yes
(Found in the run registry)
|
|
USER ACTIONS
 |
Uninstall it 21%
Keep it 79%
|
|
|
MOST USED OS
~99%
Windows 7 (SP1)
|
Geography
83.33% of installs come from the United States
Which countries install it?
| United States |
83.33% |
| United Kingdom |
16.67% |
About LogMeIn
LogMeIn provides software as a service-based (SAAS) remote connectivity, collaboration, and support solutions to businesses and consumers.
Publisher URL: www.logmein.com