Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

2009.5.8.1 90.00%
2008.6.5.1 10.00%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, AllocateAndInitializeSid, GetTokenInformation, EqualSid, FreeSid, RegSetValueExW, RegCreateKeyExW, RegEnumKeyExW, RegDeleteKeyW, RegQueryValueExW, RegOpenKeyExW, RegCloseKey, RegEnumValueW, RegEnumValueA, LookupPrivilegeValueA, RegSetValueExA, RegCreateKeyExA, RegEnumKeyExA, RegDeleteKeyA, RegQueryValueExA, RegOpenKeyExA
gdi32.dll
GetObjectW, CreateCompatibleDC, CreateCompatibleBitmap, SelectObject, GetDeviceCaps, CreateBitmap, SetBkColor, GetBkColor, CreateSolidBrush, SetTextColor, DeleteObject, DeleteDC, GetStockObject, BitBlt, GetObjectA
kernel32.dll
FreeLibrary, GetProcAddress, LoadLibraryW, GlobalFree, GlobalHandle, GetModuleHandleW, CloseHandle, GetCommandLineW, GetStringTypeW, GetStringTypeA, GetCPInfo, GetOEMCP, IsBadCodePtr, IsBadReadPtr, LoadLibraryA, GetStartupInfoA, GetFileType, SetHandleCount, GetCommandLineA, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, GetCurrentThreadId, UnhandledExceptionFilter, GetStdHandle, WriteFile, LCMapStringW, WideCharToMultiByte, LCMapStringA, MultiByteToWideChar, GetSystemInfo, VirtualProtect, TerminateProcess, TlsGetValue, TlsSetValue, TlsFree, TlsAlloc, IsBadWritePtr, VirtualAlloc, VirtualFree, HeapCreate, VirtualQuery, SetUnhandledExceptionFilter, GetModuleFileNameA, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, GetStartupInfoW, GetModuleHandleA, RtlUnwind, ExitProcess, HeapSize, HeapReAlloc, HeapDestroy, GetVersionExA, GetModuleFileNameW, lstrcmpW, lstrlenW, GetCurrentProcess, FlushInstructionCache, HeapAlloc, MulDiv, InterlockedExchange, lstrcpyW, LeaveCriticalSection, EnterCriticalSection, GetLastError, GlobalAlloc, GlobalLock, GlobalUnlock, SetLastError, ExpandEnvironmentStringsW, GetProcessHeap, HeapFree, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, DeleteCriticalSection, InitializeCriticalSection, RaiseException, GetVersionExW, GetThreadLocale, GetLocaleInfoA, GetACP, FreeEnvironmentStringsA, FlushFileBuffers, CreateFileA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetConsoleMode, GetConsoleCP, SetFilePointer, Sleep, IsValidCodePage, InterlockedDecrement, InterlockedIncrement, IsDebuggerPresent, IsProcessorFeaturePresent, InterlockedCompareExchange, LoadLibraryExA, lstrcmpiA, GetShortPathNameA, lstrcmpA, ExpandEnvironmentStringsA, lstrlenA, FindResourceExA, FindResourceA
ole32.dll
CoCreateInstance, CLSIDFromString, CLSIDFromProgID, CoGetClassObject, OleLockRunning, CoTaskMemAlloc, StringFromGUID2, OleUninitialize, OleInitialize, CreateStreamOnHGlobal
user32.dll
SystemParametersInfoW, GetWindow, GetClientRect, MapWindowPoints, SetWindowPos, SendMessageW, GetWindowLongW, EndDialog, GetIconInfo, DrawIconEx, FindWindowW, GetWindowRect, GetMessageW, TranslateMessage, DispatchMessageW, DialogBoxIndirectParamW, KillTimer, SetTimer, PostMessageW, wsprintfW, CreateAcceleratorTableW, CharNextW, GetClassNameW, RedrawWindow, IsWindow, GetFocus, IsChild, SetFocus, CallWindowProcW, GetDesktopWindow, InvalidateRgn, InvalidateRect, ReleaseDC, GetDC, FillRect, SetCapture, ReleaseCapture, DestroyAcceleratorTable, GetWindowTextLengthW, GetWindowTextW, DefWindowProcW, RegisterWindowMessageW, GetClassInfoExW, LoadCursorW, RegisterClassExW, CreateWindowExW, MapDialogRect, SetWindowContextHelpId, LoadImageW, ShowWindow, BringWindowToTop, SetForegroundWindow, SetWindowTextW, SetWindowLongW, DestroyWindow, UnregisterClassW, GetDlgItem, LoadBitmapW, BeginPaint, GetSysColor, GetSystemMetrics, EndPaint, GetParent, SendMessageA, GetWindowLongA, CallWindowProcA, SystemParametersInfoA, FindWindowA, GetMessageA, DispatchMessageA, DialogBoxIndirectParamA, LoadStringA, PostMessageA, LoadImageA, CreateAcceleratorTableA, UnregisterClassA, GetClassNameA, ScreenToClient, ClientToScreen, MoveWindow, CharNextA, RegisterWindowMessageA, GetClassInfoExA, LoadCursorA, RegisterClassExA, GetWindowTextLengthA, GetWindowTextA, SetWindowTextA, DefWindowProcA, CreateWindowExA, SetWindowLongA, LoadBitmapA

YMailAdvisor.exe

Yahoo! Mail by Yahoo! Inc. (Signed)

Remove YMailAdvisor.exe
Version:   2009.5.8.1
MD5:   7d21171da91a625692daa6e0f27d27b2
SHA1:   5df92634b24e4d3bbcbc3f3af7289e7ff2261f78
SHA256:   615ec0ad0cad424048630f53014e8fc3a02505ffeee7e90ff410f1df88dacc0a

Overview

ymailadvisor.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). It is installed with a couple of know programs including Yahoo! Mail Advisor published by Yahoo! Inc., Yahoo! Install Manager from Yahoo! Inc. and Yahoo! Install Manager by Yahoo! Inc.. The file is digitally signed by Yahoo! Inc. which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:ymailadvisor.exe
Publisher:Yahoo! Inc.
Product name:Yahoo! Mail
Description:Yahoo! Mail Advisor
Typical file path:C:\Program Files\yahoo!\common\ymailadvisor.exe
File version:2009.5.8.1
Product version:1.0.0.3
Size:170.34 KB (174,424 bytes)
Certificate
Issued to:Yahoo! Inc.
Authority (CA):VeriSign
Effective date:Thursday, August 10, 2006
Expiration date:Thursday, September 3, 2009
Digital DNA
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
AT&T Inc.
26% remove
AT&T Inc.
  67% remove
The att.net Toolbar puts everything at your fingertips with quick and easy access to your favorite online sites and applications with just one click! It's always available right from your browser window so you can conveniently access your email, att.net home page, help & support, search, and key security features anytime - all from one easy location. You can customize your toolbar with your favorite sites and applications to make it you...
Yahoo! Inc.
29% remove
This program notifies you when new messages arrive in your Yahoo mailbox.
Yahoo! Inc.
20% remove
Yahoo Install Manager manages Yahoo program downloads and installations. The install manager keeps track of such programs and assists in the installations to put things in their proper places.
Yahoo! Inc.
  52% remove
Yahoo! Toolbar is a toolbar that installs on the Internet Explorer and Firefox browsers, within the context of internet access functions. It allows access to several functions, including Yahoo! Search and Yahoo! Mail. "Some versions of Yahoo! Toolbar allow you to share information with Yahoo! about sites you visit to improve Yahoo! services. Yahoo! Toolbar will transmit the following information to Yahoo!: complete web site addresses...
Yahoo! Inc.
18% remove
The most unique attribute of Yahoo! Browser Services is its ability to update and add new services on the fly without a browser restart or even reloading the page! As a user, this means no more installers to run or losing your place on the web. For developers, you can check for and activate new services with a single function call, pending user approval - we handle the complexity of software distribution and updates for you. Because we...
Yahoo! Inc.
10% remove
Yahoo! Inc.
  54% remove
Get Facebook, email, news, weather and more - right from your toolbar. Yahoo Search Protection is offered as an additional service when you install Yahoo Toolbar for Internet Explorer. It allows you to manage Yahoo as your default search engine, and alerts you if third party software attempts to change your default search preferences so that you can keep your original settings.

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'YMailAdvisor' → "C:\Program Files\Yahoo!\Common\YMailAdvisor.exe"

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00090949%
0.028634%
Kernel CPU:0.00060742%
0.013761%
User CPU:0.00030207%
0.014873%
Kernel CPU time:431 ms/min
100,923,805ms/min
CPU cycles:88,565/sec
17,470,203/sec
Context switches:1/sec
284/sec
Memory
Private memory:720 KB
21.59 MB
Private (maximum):2.25 MB
Private (minimum):1.88 MB
Non-paged memory:720 KB
21.59 MB
Virtual memory:27.33 MB
140.96 MB
Virtual memory (peak):27.7 MB
169.69 MB
Working set:1.93 MB
18.61 MB
Working set (peak):2.5 MB
37.95 MB
Page faults:842/min
2,039/min
I/O
I/O read transfer:0 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:0 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:1
12
Handles:32
600
GUI GDI count:7
103
GUI GDI peak:9
142
GUI USER count:2
49
GUI USER peak:3
71

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:"C:\Program Files\yahoo!\common\ymailadvisor.exe"
Owner:User
Parent process:Explorer.EXE (Windows Explorer by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 60.00%
Windows Vista Home Basic 20.00%
Windows Vista Home Premium 10.00%
Windows 7 Professional 10.00%

Distribution by countryDistribution by country

United States installs about 60.00% of Yahoo! Mail.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 33.33%
Hewlett-Packard 33.33%
Toshiba 33.33%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE