Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

2009.5.8.1 90.00%
2008.6.5.1 10.00%


Parent process
Related files

PE structurePE file structure

Show functions
Import table
OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, AllocateAndInitializeSid, GetTokenInformation, EqualSid, FreeSid, RegSetValueExW, RegCreateKeyExW, RegEnumKeyExW, RegDeleteKeyW, RegQueryValueExW, RegOpenKeyExW, RegCloseKey, RegEnumValueW, RegEnumValueA, LookupPrivilegeValueA, RegSetValueExA, RegCreateKeyExA, RegEnumKeyExA, RegDeleteKeyA, RegQueryValueExA, RegOpenKeyExA
GetObjectW, CreateCompatibleDC, CreateCompatibleBitmap, SelectObject, GetDeviceCaps, CreateBitmap, SetBkColor, GetBkColor, CreateSolidBrush, SetTextColor, DeleteObject, DeleteDC, GetStockObject, BitBlt, GetObjectA
FreeLibrary, GetProcAddress, LoadLibraryW, GlobalFree, GlobalHandle, GetModuleHandleW, CloseHandle, GetCommandLineW, GetStringTypeW, GetStringTypeA, GetCPInfo, GetOEMCP, IsBadCodePtr, IsBadReadPtr, LoadLibraryA, GetStartupInfoA, GetFileType, SetHandleCount, GetCommandLineA, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, GetCurrentThreadId, UnhandledExceptionFilter, GetStdHandle, WriteFile, LCMapStringW, WideCharToMultiByte, LCMapStringA, MultiByteToWideChar, GetSystemInfo, VirtualProtect, TerminateProcess, TlsGetValue, TlsSetValue, TlsFree, TlsAlloc, IsBadWritePtr, VirtualAlloc, VirtualFree, HeapCreate, VirtualQuery, SetUnhandledExceptionFilter, GetModuleFileNameA, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, GetStartupInfoW, GetModuleHandleA, RtlUnwind, ExitProcess, HeapSize, HeapReAlloc, HeapDestroy, GetVersionExA, GetModuleFileNameW, lstrcmpW, lstrlenW, GetCurrentProcess, FlushInstructionCache, HeapAlloc, MulDiv, InterlockedExchange, lstrcpyW, LeaveCriticalSection, EnterCriticalSection, GetLastError, GlobalAlloc, GlobalLock, GlobalUnlock, SetLastError, ExpandEnvironmentStringsW, GetProcessHeap, HeapFree, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, DeleteCriticalSection, InitializeCriticalSection, RaiseException, GetVersionExW, GetThreadLocale, GetLocaleInfoA, GetACP, FreeEnvironmentStringsA, FlushFileBuffers, CreateFileA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetConsoleMode, GetConsoleCP, SetFilePointer, Sleep, IsValidCodePage, InterlockedDecrement, InterlockedIncrement, IsDebuggerPresent, IsProcessorFeaturePresent, InterlockedCompareExchange, LoadLibraryExA, lstrcmpiA, GetShortPathNameA, lstrcmpA, ExpandEnvironmentStringsA, lstrlenA, FindResourceExA, FindResourceA
CoCreateInstance, CLSIDFromString, CLSIDFromProgID, CoGetClassObject, OleLockRunning, CoTaskMemAlloc, StringFromGUID2, OleUninitialize, OleInitialize, CreateStreamOnHGlobal
SystemParametersInfoW, GetWindow, GetClientRect, MapWindowPoints, SetWindowPos, SendMessageW, GetWindowLongW, EndDialog, GetIconInfo, DrawIconEx, FindWindowW, GetWindowRect, GetMessageW, TranslateMessage, DispatchMessageW, DialogBoxIndirectParamW, KillTimer, SetTimer, PostMessageW, wsprintfW, CreateAcceleratorTableW, CharNextW, GetClassNameW, RedrawWindow, IsWindow, GetFocus, IsChild, SetFocus, CallWindowProcW, GetDesktopWindow, InvalidateRgn, InvalidateRect, ReleaseDC, GetDC, FillRect, SetCapture, ReleaseCapture, DestroyAcceleratorTable, GetWindowTextLengthW, GetWindowTextW, DefWindowProcW, RegisterWindowMessageW, GetClassInfoExW, LoadCursorW, RegisterClassExW, CreateWindowExW, MapDialogRect, SetWindowContextHelpId, LoadImageW, ShowWindow, BringWindowToTop, SetForegroundWindow, SetWindowTextW, SetWindowLongW, DestroyWindow, UnregisterClassW, GetDlgItem, LoadBitmapW, BeginPaint, GetSysColor, GetSystemMetrics, EndPaint, GetParent, SendMessageA, GetWindowLongA, CallWindowProcA, SystemParametersInfoA, FindWindowA, GetMessageA, DispatchMessageA, DialogBoxIndirectParamA, LoadStringA, PostMessageA, LoadImageA, CreateAcceleratorTableA, UnregisterClassA, GetClassNameA, ScreenToClient, ClientToScreen, MoveWindow, CharNextA, RegisterWindowMessageA, GetClassInfoExA, LoadCursorA, RegisterClassExA, GetWindowTextLengthA, GetWindowTextA, SetWindowTextA, DefWindowProcA, CreateWindowExA, SetWindowLongA, LoadBitmapA


Yahoo! Mail by Yahoo! Inc. (Signed)

Remove YMailAdvisor.exe
Version:   2008.6.5.1
MD5:   dc42fa40848ce3d14308c4a1a80de3ad
SHA1:   46f4abd176c812d8d5cc3431abeb4348f6ce7aa3
SHA256:   df43ab9f53d8beafaa0abc60ed609ec16bafa154da1bf0bb30688c2723297dc5


ymailadvisor.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). It is installed with a couple of know programs including Yahoo! Mail Advisor published by Yahoo! Inc., Yahoo! Toolbar from Yahoo! Inc. and Yahoo! Toolbar by Yahoo! Inc.. The file is digitally signed by Yahoo! Inc. which was issued by the VeriSign certificate authority (CA).


File name:ymailadvisor.exe
Publisher:Yahoo! Inc.
Product name:Yahoo! Mail
Description:Yahoo! Mail Advisor
Typical file path:C:\Program Files\yahoo!\common\ymailadvisor.exe
File version:2008.6.5.1
Product version:
Size:122.27 KB (125,208 bytes)
Issued to:Yahoo! Inc.
Authority (CA):VeriSign
Effective date:Thursday, August 10, 2006
Expiration date:Thursday, September 3, 2009
Digital DNA
File packed:No
More details


The following programs will install this file
AT&T Inc.
26% remove
Yahoo! Inc.
29% remove
This program notifies you when new messages arrive in your Yahoo mailbox.
Yahoo! Inc.
  51% remove
Yahoo! Toolbar is a toolbar that installs on the Internet Explorer and Firefox browsers, within the context of internet access functions. It allows access to several functions, including Yahoo! Search and Yahoo! Mail.
Yahoo! Inc.
18% remove
The most unique attribute of Yahoo! Browser Services is its ability to update and add new services on the fly without a browser restart or even reloading the page! As a user, this means no more installers to run or losing your place on the web. For developers, you can check for and activate new services with a single function call, pending user approval - we handle the complexity of software distribution and updates for you. Because we...
Yahoo! Inc.
7% remove
A Yahoo! Application (sometimes called an "app") is fun or useful software that can enhance your experience on Yahoo!. In many ways, you can think of an app as a website within Yahoo!'s website. What makes apps different from other sites, though, is that they can (only with your express permission) show you personalized information using your Yahoo! profile information (such as your name, display image, list of connections, and more). A...
Yahoo! Inc.
20% remove
Yahoo Install Manager manages Yahoo program downloads and installations. The install manager keeps track of such programs and assists in the installations to put things in their proper places.
Yahoo! Inc.
10% remove


Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'YMailAdvisor' → "C:\Program Files\Yahoo!\Common\YMailAdvisor.exe"

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Total CPU:0.00292473%
Kernel CPU:0.00197101%
User CPU:0.00095372%
Kernel CPU time:31 ms/min
Private memory:860 KB
21.59 MB
Private (maximum):2.52 MB
Private (minimum):2.19 MB
Non-paged memory:860 KB
21.59 MB
Virtual memory:34.07 MB
140.96 MB
Virtual memory (peak):35.19 MB
169.69 MB
Working set:2.19 MB
18.61 MB
Working set (peak):2.58 MB
37.95 MB
Resource allocations
GUI GDI count:4
GUI USER count:3

BehaviorsProcess properties

Integrety level:Medium
Command line:"C:\Program Files\yahoo!\common\ymailadvisor.exe"
Parent process:explorer.exe (Windows Explorer by Microsoft Corporation)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 60.00%
Windows Vista Home Basic 20.00%
Windows Vista Home Premium 10.00%
Windows 7 Professional 10.00%

Distribution by countryDistribution by country

United States installs about 60.00% of Yahoo! Mail.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 33.33%
Hewlett-Packard 33.33%
Toshiba 33.33%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE