gth.us.com
What is gth.us.com?
gth.us.com is a LogMeIn (white-label) branded support and remote access utility of LogMeIn Rescue that uses a proprietary remote desktop protocol over transmitted via SSL that provides support technichians to connect to the remote desktop. The software it typically used to provide custom PC support to remotely view, diagnose and fix an end users computer.
Overview
The most used version is 7.7.581, with over 98% of all installations currently using this version. Upon installation and setup, it defines an auto-start registry entry which makes this program run on each Windows boot for all user logins. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. The software installer includes 9 files and is usually about 7.64 MB (8,012,979 bytes).
Program details
URL: www.logmein.com
Installation folder: C:\Program Files\LogMeIn Rescue Calling Card\
Uninstaller: MsiExec.exe /I{C2835850-FCEB-4A1A-A213-57E7A9A8EC62}
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 7.64 MB
Files installed by gth.us.com
-
CallingCard.exe - LogMeIn Rescue Calling Card
-
ra64app.exe - LogMeIn Rescue GUI Launcher
-
rescue.dll - RemotelyAnywhere (RemotelyAnywhere DLL)
-
LMIRhook.000.dll - LogMeIn Rescue (LogMeIn Rescue Hook DLL)
-
rahook.dll
-
rahook9x.dll
-
rarcc.dll - LogMeIn Rescue RARCC DLL
-
RescueWinRTLib.dll - LogMeIn Rescue WinRT DLL
Behaviors exhibited
Service
- CallingCard.exe runs as a service named 'LogMeIn Rescue (837712e7-f121-52b6-f34f-cfbc8948faba)' (LMIRescue_837712e7-f121-52b6-f34f-cfbc8948faba).
Startup File (User Run)
- CallingCard.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'LogMeInRescueCallingCard' and executes as "C:\Program Files\LogMeIn Rescue Calling Card\CallingCard.exe".
Startup File (User Run Once)
- CallingCard.exe is loaded once in the current user (HKCU) registry as a startup file name '226_10354972239988' which loads as "C:\users\user\appdata\Local\LOGMEI~1\LMIR0001.tmp_r.bat".
Startup File (All Users Run)
- CallingCard.exe is loaded in the all users (HKLM) registry as a startup file name 'Allin1Convert Search Scope Monitor' which loads as "C:\Program Files2\ALLIN1~2\bar\1.bin\8hsrchmn.exe" /m=2 /w /h.
Windows Firewall Allowed Program
- CallingCard.exe is added as a firewall exception for 'C:\Program Files\LogMeIn Rescue Calling Card\CallingCard.exe'.
How do I remove gth.us.com?
You can uninstall gth.us.com from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program gth.us.com, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove gth.us.com.
OS VERSIONS
Win Vista (SP2) 33%
Win 10 33%
|
|
HOW IT STARTS
Automatically starts? Yes
(Found in the run registry)
|
|
USER ACTIONS
 |
Uninstall it 39%
Keep it 61%
|
|
Windows
Which Windows OS versions does it run on?
| Windows Vista |
33.33% |
|
| Windows 7 |
33.33% |
|
| Windows 10 |
33.33% |
|
Which OS releases does it run on? |
| Windows Vista Home Premiu... |
33.33% |
|
| Windows 8.1 Pro |
33.33% |
|
| Windows 7 Home Premium |
33.33% |
|
Geography
100.00% of installs come from the United States
Which countries install it?
PC manufacturers
What PC manufacturers (OEMs) have it installed?
| Hewlett-Packard |
50.00% |
|
| Dell |
50.00% |
|
About LogMeIn
LogMeIn provides software as a service-based (SAAS) remote connectivity, collaboration, and support solutions to businesses and consumers.
Publisher URL: www.logmein.com