Advanced Tech Support Rescue Connect
What is Advanced Tech Support Rescue Connect?
LogMeIn remote access products use a proprietary remote desktop protocol that is transmitted via SSL. An SSL certificate is created for each remote desktop and is used to cryptographically secure communications between the remote desktop and the accessing computer. Users access remote desktops using either the LogMeIn Ignition stand-alone application or a web portal. The web portal requires either an ActiveX plugin for Internet Explorer, or an extension for Firefox (the LogMeIn plug-in for Firefox), or an extension for Safari (the LogMeIn plug-in for Safari), failing that it falls back to requiring Java in order to run a Java program, and failing that it falls back to "a screen-shot-based HTML remote control". The service connects the remote desktop and the local computer using SSL over TCP or UDP and utilizing NAT traversal techniques to achieve peer-to-peer connectivity when available. The web portal requires either an ActiveX plugin for Internet Explorer, or an extension for Firefox (the LogMeIn plug-in for Firefox), or an extension for Safari (the LogMeIn plug-in for Safari), failing that it falls back to requiring Java in order to run a Java program, and failing that it falls back to "a screen-shot-based HTML remote control". The service connects the remote desktop and the local computer using SSL over TCP or UDP and utilizing NAT traversal techniques to achieve peer-to-peer connectivity when available.
Overview
Upon installation and setup, it defines an auto-start registry entry which makes this program run on each Windows boot for all user logins. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. A vast majority of those who have this installed end up removing it just after a couple weeks. The software installer includes 12 files and is usually about 7.31 MB (7,662,175 bytes).
Program details
URL: www.logmein.com
Installation folder: C:\Program Files\LogMeIn Rescue Calling Card\
Uninstaller: MsiExec.exe /I{C2835850-FCEB-4A1A-A213-57E7A9A8EC62}
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 7.31 MB
Files installed by Advanced Tech Support Rescue Connect
-
CallingCard.exe - LogMeIn Rescue Calling Card
-
ra64app.exe - LogMeIn Rescue GUI Launcher
-
rescue.dll - RemotelyAnywhere (RemotelyAnywhere DLL)
-
rahook.dll - LogMeIn Rescue (LogMeIn Rescue Hook DLL)
-
rahook9x.dll
-
rarcc.dll - LogMeIn Rescue RARCC DLL
-
Unattended.exe
-
unlock.dll
-
unlock64.dll
-
G-CustomBrowser.exe - WindowsApplication1
-
RescueWinRTLib.dll - LogMeIn Rescue WinRT DLL
-
unicows.dll (by Microsoft) - Microsoft (R) Windows (R) 95, Windows (R) 98, and Windows (R) Millennium Operating Systems (Microsoft Layer for Unicode on Win9x Systems (MSLU))
Behaviors exhibited
Service
- CallingCard.exe runs as a service named 'LogMeIn Rescue (837712e7-f121-52b6-f34f-cfbc8948faba)' (LMIRescue_837712e7-f121-52b6-f34f-cfbc8948faba).
Startup File (User Run)
- CallingCard.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'LogMeInRescueCallingCard' and executes as "C:\Program Files\LogMeIn Rescue Calling Card\CallingCard.exe".
Startup File (User Run Once)
- CallingCard.exe is loaded once in the current user (HKCU) registry as a startup file name '226_10354972239988' which loads as "C:\users\user\appdata\Local\LOGMEI~1\LMIR0001.tmp_r.bat".
Startup File (All Users Run)
- CallingCard.exe is loaded in the all users (HKLM) registry as a startup file name 'Allin1Convert Search Scope Monitor' which loads as "C:\Program Files2\ALLIN1~2\bar\1.bin\8hsrchmn.exe" /m=2 /w /h.
Windows Firewall Allowed Program
- CallingCard.exe is added as a firewall exception for 'C:\Program Files\LogMeIn Rescue Calling Card\CallingCard.exe'.
How do I remove Advanced Tech Support Rescue Connect?
You can uninstall Advanced Tech Support Rescue Connect from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program Advanced Tech Support Rescue Connect, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove Advanced Tech Support Rescue Connect.
OS VERSIONS
Win 7 (SP1) 65%
Win XP 0%
|
|
HOW IT STARTS
Automatically starts? Yes
(Found in the run registry)
|
|
USER ACTIONS
 |
Uninstall it 65%
Keep it 35%
|
|
Windows
Which Windows OS versions does it run on?
| Windows 7 |
66.04% |
|
| Windows Vista |
16.56% |
|
| Windows 10 |
13.63% |
|
| Windows XP |
3.56% |
|
| Windows Server 2003 |
0.21% |
|
Which OS releases does it run on? |
| Windows 7 Home Premium |
57.14% |
|
| Windows Vista Home Premiu... |
13.03% |
|
| Windows 10 Home |
7.98% |
|
| Windows 7 Professional |
6.30% |
|
| Microsoft Windows XP |
3.78% |
|
| Windows 7 Ultimate |
2.73% |
|
Geography
90.86% of installs come from the United States
Which countries install it?
| United States |
90.86% |
| United Kingdom |
3.68% |
| Canada |
3.05% |
| Australia |
2.03% |
| Singapore |
0.13% |
| Turkey |
0.13% |
| VI |
0.13% |
PC manufacturers
What PC manufacturers (OEMs) have it installed?
| Hewlett-Packard |
41.12% |
|
| Dell |
32.09% |
|
| Acer |
9.97% |
|
| Toshiba |
9.03% |
|
| Intel |
2.18% |
|
| ASUS |
2.18% |
|
| GIGABYTE |
0.93% |
|
| Lenovo |
0.93% |
|
| Samsung |
0.93% |
|
| American Megatrends |
0.62% |
|
Common models |
| HP Pavilion dv7 Notebook ... |
9.86% |
|
| HP Pavilion dv6 Notebook ... |
4.23% |
|
| Dell Inspiron 530 |
3.76% |
|
| Dell Inspiron 570 |
2.35% |
|
| HP Pavilion g7 Notebook P... |
2.35% |
|
| Dell Inspiron 1545 |
1.88% |
|
About LogMeIn
LogMeIn provides software as a service-based (SAAS) remote connectivity, collaboration, and support solutions to businesses and consumers.
Publisher URL: www.logmein.com