Yahoo Messenger

Yahoo Messenger

by Yahoo! Inc.

What is Yahoo Messenger?

Yahoo Messenger is software application developed by Yahoo! Inc.. It is most commonly found on computers running Windows 7 (SP1) with nearly ~99% of installations running this operating system.

Yahoo Messenger is most popular in the United States with 100.00% of installations residing in this country.

Yahoo Messenger adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Yahoo Messenger is known to create 3 firewall exceptions to allow inbound and outbound connectivity.

About Yahoo Messenger?

This downloadable PC game is available on Yahoo! Games and offers a casual gaming experience.

Software Behaviors

Services:
  • YahooMessenger.exe runs as a service named 'McAfee Application Installer Cleanup (0285841475581559)' (0285841475581559mcinstcleanup).
  • UNWISE.EXE runs as a service named 'Browser System Enahncer' (671c50b0).
Firewall:
  • YahooMessenger.exe is added as a firewall exception for 'C:\cyber\Yahoo!\Messenger\YahooMessenger.exe'.
  • UNWISE.EXE is added as a firewall exception for 'C:\Program Files1\Yahoo!\MESSEN~1\UNWISE.EXE'.
  • Ymsgr_tray.exe is added as a firewall exception for 'C:\Program Files1\Yahoo!\Messenger\ymsgr_tray.exe'.
Scheduled tasks:
  • YahooMessenger.exe is scheduled as a task with the class '{D556CEAB-DA41-4596-99DC-3BAE7F8CA0DF}' (runs on registration).
  • UNWISE.EXE is scheduled as a task with the class '{F71A9918-1861-4EFE-AE94-530BDDE46DD4}' (runs on registration).
  • Ymsgr_tray.exe is scheduled as a task named 'YahooMessngr Tray' (runs on boot).

Startup Entries

Startup tasks:
  • YahooMessenger.exe is automatically launched at startup through a scheduled task named 1.
  • Ymsgr_tray.exe is automatically launched at startup through a scheduled task named YahooMessngr Tray.
Registry entries:
  • YahooMessenger.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Windows Bootloader' and executes as C:\users\user\appdata\Local\Temp\Microsoft Bootloader\bootloader.exe.
Registry entries (User):
  • YahooMessenger.exe is loaded once in the current user (HKCU) registry as a startup file name 'Shockwave Updater' which loads as "C:\Windows\System32\Adobe\SHOCKW~1\SWHELP~1.EXE" -Update -1103472 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 1.1.4322; .

Software Details

URL:
https://games.yahoo.com
Support:
Installation path:
C:\Program Files\Yahoo!\Messenger
Uninstaller:
C:\Program Files2\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\Program Files2\Yahoo!\MESSEN~1\INSTALL.LOG
Size:
0.00 B
Language:
English

Yahoo Messenger Executable Details

Primary executable:
dpinst.exe
Name:
Yahoo Messenger
Path:
C:\Program Files\Yahoo!\Messenger\dpinst.exe
MD5:
2bfabd08bfaa4c75fe105af365733954
SHA-1:
SHA-256:
Files installed by Yahoo Messenger
File Type Filename MD5
EXE
2bfabd08bfaa4c75fe105af365733954
DLL
cec050532e8f5015ff0b75baf8b2982f
DLL
7e344937b60031258ce9f51b158c1b8f
DLL
0e790c17ffaba1e01986d0c5789c4667
DLL
f40dd3104a3d5cdb708d66d5aa8c3a00
DLL
c1f9a46a92d6e2a452c4252599573a0a
DLL
b776ae161953cdc42254a119bb0272d3
DLL
d191ea55820a8383dc9d861e407b1d21
DLL
dc50c9299318bbcb51de1bed9d321c20
DLL
83e624d0986fa920afb69eb71d79942d