Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

2009.5.8.1 90.00%
2008.6.5.1 10.00%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, AllocateAndInitializeSid, GetTokenInformation, EqualSid, FreeSid, RegSetValueExW, RegCreateKeyExW, RegEnumKeyExW, RegDeleteKeyW, RegQueryValueExW, RegOpenKeyExW, RegCloseKey, RegEnumValueW, RegEnumValueA, LookupPrivilegeValueA, RegSetValueExA, RegCreateKeyExA, RegEnumKeyExA, RegDeleteKeyA, RegQueryValueExA, RegOpenKeyExA
gdi32.dll
GetObjectW, CreateCompatibleDC, CreateCompatibleBitmap, SelectObject, GetDeviceCaps, CreateBitmap, SetBkColor, GetBkColor, CreateSolidBrush, SetTextColor, DeleteObject, DeleteDC, GetStockObject, BitBlt, GetObjectA
kernel32.dll
FreeLibrary, GetProcAddress, LoadLibraryW, GlobalFree, GlobalHandle, GetModuleHandleW, CloseHandle, GetCommandLineW, GetStringTypeW, GetStringTypeA, GetCPInfo, GetOEMCP, IsBadCodePtr, IsBadReadPtr, LoadLibraryA, GetStartupInfoA, GetFileType, SetHandleCount, GetCommandLineA, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, GetCurrentThreadId, UnhandledExceptionFilter, GetStdHandle, WriteFile, LCMapStringW, WideCharToMultiByte, LCMapStringA, MultiByteToWideChar, GetSystemInfo, VirtualProtect, TerminateProcess, TlsGetValue, TlsSetValue, TlsFree, TlsAlloc, IsBadWritePtr, VirtualAlloc, VirtualFree, HeapCreate, VirtualQuery, SetUnhandledExceptionFilter, GetModuleFileNameA, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, GetStartupInfoW, GetModuleHandleA, RtlUnwind, ExitProcess, HeapSize, HeapReAlloc, HeapDestroy, GetVersionExA, GetModuleFileNameW, lstrcmpW, lstrlenW, GetCurrentProcess, FlushInstructionCache, HeapAlloc, MulDiv, InterlockedExchange, lstrcpyW, LeaveCriticalSection, EnterCriticalSection, GetLastError, GlobalAlloc, GlobalLock, GlobalUnlock, SetLastError, ExpandEnvironmentStringsW, GetProcessHeap, HeapFree, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, DeleteCriticalSection, InitializeCriticalSection, RaiseException, GetVersionExW, GetThreadLocale, GetLocaleInfoA, GetACP, FreeEnvironmentStringsA, FlushFileBuffers, CreateFileA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetConsoleMode, GetConsoleCP, SetFilePointer, Sleep, IsValidCodePage, InterlockedDecrement, InterlockedIncrement, IsDebuggerPresent, IsProcessorFeaturePresent, InterlockedCompareExchange, LoadLibraryExA, lstrcmpiA, GetShortPathNameA, lstrcmpA, ExpandEnvironmentStringsA, lstrlenA, FindResourceExA, FindResourceA
ole32.dll
CoCreateInstance, CLSIDFromString, CLSIDFromProgID, CoGetClassObject, OleLockRunning, CoTaskMemAlloc, StringFromGUID2, OleUninitialize, OleInitialize, CreateStreamOnHGlobal
user32.dll
SystemParametersInfoW, GetWindow, GetClientRect, MapWindowPoints, SetWindowPos, SendMessageW, GetWindowLongW, EndDialog, GetIconInfo, DrawIconEx, FindWindowW, GetWindowRect, GetMessageW, TranslateMessage, DispatchMessageW, DialogBoxIndirectParamW, KillTimer, SetTimer, PostMessageW, wsprintfW, CreateAcceleratorTableW, CharNextW, GetClassNameW, RedrawWindow, IsWindow, GetFocus, IsChild, SetFocus, CallWindowProcW, GetDesktopWindow, InvalidateRgn, InvalidateRect, ReleaseDC, GetDC, FillRect, SetCapture, ReleaseCapture, DestroyAcceleratorTable, GetWindowTextLengthW, GetWindowTextW, DefWindowProcW, RegisterWindowMessageW, GetClassInfoExW, LoadCursorW, RegisterClassExW, CreateWindowExW, MapDialogRect, SetWindowContextHelpId, LoadImageW, ShowWindow, BringWindowToTop, SetForegroundWindow, SetWindowTextW, SetWindowLongW, DestroyWindow, UnregisterClassW, GetDlgItem, LoadBitmapW, BeginPaint, GetSysColor, GetSystemMetrics, EndPaint, GetParent, SendMessageA, GetWindowLongA, CallWindowProcA, SystemParametersInfoA, FindWindowA, GetMessageA, DispatchMessageA, DialogBoxIndirectParamA, LoadStringA, PostMessageA, LoadImageA, CreateAcceleratorTableA, UnregisterClassA, GetClassNameA, ScreenToClient, ClientToScreen, MoveWindow, CharNextA, RegisterWindowMessageA, GetClassInfoExA, LoadCursorA, RegisterClassExA, GetWindowTextLengthA, GetWindowTextA, SetWindowTextA, DefWindowProcA, CreateWindowExA, SetWindowLongA, LoadBitmapA

YMailAdvisor.exe

Yahoo! Mail by Yahoo! Inc. (Signed)

Remove YMailAdvisor.exe
Version:   2008.6.5.1
MD5:   dc42fa40848ce3d14308c4a1a80de3ad
SHA1:   46f4abd176c812d8d5cc3431abeb4348f6ce7aa3
SHA256:   df43ab9f53d8beafaa0abc60ed609ec16bafa154da1bf0bb30688c2723297dc5

Overview

ymailadvisor.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). It is installed with a couple of know programs including Yahoo! Mail Advisor published by Yahoo! Inc., Yahoo! Toolbar from Yahoo! Inc. and Yahoo! Toolbar by Yahoo! Inc.. The file is digitally signed by Yahoo! Inc. which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:ymailadvisor.exe
Publisher:Yahoo! Inc.
Product name:Yahoo! Mail
Description:Yahoo! Mail Advisor
Typical file path:C:\Program Files\yahoo!\common\ymailadvisor.exe
File version:2008.6.5.1
Product version:1.0.0.2
Size:122.27 KB (125,208 bytes)
Certificate
Issued to:Yahoo! Inc.
Authority (CA):VeriSign
Effective date:Thursday, August 10, 2006
Expiration date:Thursday, September 3, 2009
Digital DNA
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
AT&T Inc.
26% remove
Yahoo! Inc.
29% remove
This program notifies you when new messages arrive in your Yahoo mailbox.
Yahoo! Inc.
  51% remove
Yahoo! Toolbar is a toolbar that installs on the Internet Explorer and Firefox browsers, within the context of internet access functions. It allows access to several functions, including Yahoo! Search and Yahoo! Mail.
Yahoo! Inc.
18% remove
The most unique attribute of Yahoo! Browser Services is its ability to update and add new services on the fly without a browser restart or even reloading the page! As a user, this means no more installers to run or losing your place on the web. For developers, you can check for and activate new services with a single function call, pending user approval - we handle the complexity of software distribution and updates for you. Because we...
Yahoo! Inc.
7% remove
A Yahoo! Application (sometimes called an "app") is fun or useful software that can enhance your experience on Yahoo!. In many ways, you can think of an app as a website within Yahoo!'s website. What makes apps different from other sites, though, is that they can (only with your express permission) show you personalized information using your Yahoo! profile information (such as your name, display image, list of connections, and more). A...
Yahoo! Inc.
20% remove
Yahoo Install Manager manages Yahoo program downloads and installations. The install manager keeps track of such programs and assists in the installations to put things in their proper places.
Yahoo! Inc.
10% remove

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'YMailAdvisor' → "C:\Program Files\Yahoo!\Common\YMailAdvisor.exe"

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00292473%
0.028634%
Kernel CPU:0.00197101%
0.013761%
User CPU:0.00095372%
0.014873%
Kernel CPU time:31 ms/min
100,923,805ms/min
Memory
Private memory:860 KB
21.59 MB
Private (maximum):2.52 MB
Private (minimum):2.19 MB
Non-paged memory:860 KB
21.59 MB
Virtual memory:34.07 MB
140.96 MB
Virtual memory (peak):35.19 MB
169.69 MB
Working set:2.19 MB
18.61 MB
Working set (peak):2.58 MB
37.95 MB
Resource allocations
Threads:2
12
Handles:24
600
GUI GDI count:4
103
GUI USER count:3
49

BehaviorsProcess properties

Integrety level:Medium
Platform:32-bit
Command line:"C:\Program Files\yahoo!\common\ymailadvisor.exe"
Owner:User
Parent process:explorer.exe (Windows Explorer by Microsoft Corporation)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 60.00%
Windows Vista Home Basic 20.00%
Windows Vista Home Premium 10.00%
Windows 7 Professional 10.00%

Distribution by countryDistribution by country

United States installs about 60.00% of Yahoo! Mail.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 33.33%
Hewlett-Packard 33.33%
Toshiba 33.33%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE