Remote Rescue
Overview
Remote Rescue is a software program developed by LogMeIn. The most common release is 7.4.515, with over 98% of all installations currently using this version. During setup, the program creates a startup registration point in Windows in order to automatically start when any user boots the PC. Upon being installed, the software adds a Windows Service which is designed to run continuously in the background. Manually stopping the service has been seen to cause the program to stop functing properly. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. The setup package generally installs about 9 files and is usually about 10.98 MB (11,514,112 bytes). Relative to the overall usage of users who have this installed on their PCs, most are running Windows 10 and Windows 7 (SP1). Most users that have installed this software come from the United States.
Program details
URL: www.logmein.com
Installation folder: C:\Program Files\LogMeIn Rescue Calling Card\
Uninstaller: MsiExec.exe /I{A22B8513-EA8C-46A1-9735-F5BE971C368D}
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 10.98 MB
Files installed by Remote Rescue
-
CallingCard.exe - LogMeIn Rescue Calling Card
-
ra64app.exe - LogMeIn Rescue GUI Launcher
-
rescue.dll - RemotelyAnywhere (RemotelyAnywhere DLL)
-
LMIRhook.000.dll - LogMeIn Rescue (LogMeIn Rescue Hook DLL)
-
rarcc.dll - LogMeIn Rescue RARCC DLL
-
RescueWinRTLib.dll - LogMeIn Rescue WinRT DLL
-
Unattended.exe
-
unlock.dll
-
unlock64.dll
Behaviors exhibited
Service
- CallingCard.exe runs as a service named 'LogMeIn Rescue (17965434-a47a-4487-ab75-27a0da51ffd5)' (LMIRescue_17965434-a47a-4487-ab75-27a0da51ffd5).
Startup File (User Run)
- CallingCard.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'LogMeInRescueCallingCard' and executes as "C:\Program Files\LogMeIn Rescue Calling Card\CallingCard.exe".
Startup File (User Run Once)
- CallingCard.exe is loaded once in the current user (HKCU) registry as a startup file name '226_10354972239988' which loads as "C:\users\user\appdata\Local\LOGMEI~1\LMIR0001.tmp_r.bat".
Startup File (All Users Run)
- CallingCard.exe is loaded in the all users (HKLM) registry as a startup file name 'Allin1Convert Search Scope Monitor' which loads as "C:\Program Files2\ALLIN1~2\bar\1.bin\8hsrchmn.exe" /m=2 /w /h.
Windows Firewall Allowed Program
- CallingCard.exe is added as a firewall exception for 'C:\Program Files\LogMeIn Rescue Calling Card\CallingCard.exe'.
How do I remove Remote Rescue?
You can uninstall Remote Rescue from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program Remote Rescue, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove Remote Rescue.
OS VERSIONS
Win 10 43%
Win XP 21%
|
|
HOW IT STARTS
Automatically starts? Yes
(Found in the run registry)
|
|
USER ACTIONS
 |
Uninstall it 3%
Keep it 97%
|
|
Windows
Which Windows OS versions does it run on?
| Windows 10 |
42.86% |
|
| Windows 7 |
35.71% |
|
| Windows XP |
21.43% |
|
Which OS releases does it run on? |
| Windows 7 Professional |
21.43% |
|
| Microsoft Windows XP |
21.43% |
|
| Windows 7 Home Premium |
14.29% |
|
| Windows 8.1 |
14.29% |
|
| Windows 10 Pro |
7.14% |
|
| Windows 8 Pro |
7.14% |
|
Geography
100.00% of installs come from the United States
Which countries install it?
PC manufacturers
What PC manufacturers (OEMs) have it installed?
| Hewlett-Packard |
25.00% |
|
| Sahara |
12.50% |
|
| Lenovo |
12.50% |
|
| Dell |
12.50% |
|
| Compaq |
12.50% |
|
| Acer |
12.50% |
|
| American Megatrends |
12.50% |
|
Common models |
| MSI MS-7823 |
11.11% |
|
| MSI MS-7721 |
11.11% |
|
| LENOVO 20C5004YUS |
11.11% |
|
| HP Pavilion dv6 Notebook ... |
11.11% |
|
| HP 2000 Notebook PC |
11.11% |
|
| Gigabyte Z170XP-SLI |
11.11% |
|
About LogMeIn
LogMeIn provides software as a service-based (SAAS) remote connectivity, collaboration, and support solutions to businesses and consumers.
Publisher URL: www.logmein.com