Yahoo Messenger

Yahoo Messenger

by Yahoo! Inc.

What is Yahoo Messenger?

Yahoo Messenger is software application developed by Yahoo! Inc.. It is most commonly found on computers running Windows 7 (SP1) with nearly ~99% of installations running this operating system.

Yahoo Messenger is most popular in the United States with 100.00% of installations residing in this country.

Yahoo Messenger adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Yahoo Messenger is known to create 3 firewall exceptions to allow inbound and outbound connectivity.

About Yahoo Messenger?

This downloadable PC game is available on Yahoo! Games and offers a casual gaming experience.

Software Behaviors

Services:
  • YahooMessenger.exe runs as a service named 'McAfee Application Installer Cleanup (0285841475581559)' (0285841475581559mcinstcleanup).
  • UNWISE.EXE runs as a service named 'Browser System Enahncer' (671c50b0).
Firewall:
  • YahooMessenger.exe is added as a firewall exception for 'C:\cyber\Yahoo!\Messenger\YahooMessenger.exe'.
  • UNWISE.EXE is added as a firewall exception for 'C:\Program Files1\Yahoo!\MESSEN~1\UNWISE.EXE'.
  • Ymsgr_tray.exe is added as a firewall exception for 'C:\Program Files1\Yahoo!\Messenger\ymsgr_tray.exe'.
Scheduled tasks:
  • YahooMessenger.exe is scheduled as a task with the class '{D556CEAB-DA41-4596-99DC-3BAE7F8CA0DF}' (runs on registration).
  • UNWISE.EXE is scheduled as a task with the class '{F71A9918-1861-4EFE-AE94-530BDDE46DD4}' (runs on registration).
  • Ymsgr_tray.exe is scheduled as a task named 'YahooMessngr Tray' (runs on boot).

Startup Entries

Startup tasks:
  • YahooMessenger.exe is automatically launched at startup through a scheduled task named 1.
  • Ymsgr_tray.exe is automatically launched at startup through a scheduled task named YahooMessngr Tray.
Registry entries:
  • YahooMessenger.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Windows Bootloader' and executes as C:\users\user\appdata\Local\Temp\Microsoft Bootloader\bootloader.exe.
Registry entries (User):
  • YahooMessenger.exe is loaded once in the current user (HKCU) registry as a startup file name 'Shockwave Updater' which loads as "C:\Windows\System32\Adobe\SHOCKW~1\SWHELP~1.EXE" -Update -1103472 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 1.1.4322; .

Software Details

URL:
https://games.yahoo.com
Support:
Installation path:
C:\Program Files\Yahoo!\Messenger
Uninstaller:
C:\Program Files2\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\Program Files2\Yahoo!\MESSEN~1\INSTALL.LOG
Size:
0.00 B
Language:
English

Yahoo Messenger Executable Details

Primary executable:
dpinst.exe
Name:
Yahoo Messenger
Path:
C:\Program Files\Yahoo!\Messenger\dpinst.exe
MD5:
2bfabd08bfaa4c75fe105af365733954
SHA-1:
SHA-256:
Files installed by Yahoo Messenger
File Type Filename MD5
DLL
f7d68584fe03fcdc95766c799a6d47f3
DLL
321c909debe5dcf3c7c6cb2488cee98b
DLL
a238ce7ce547499629f8c80f43dd56fa
DLL
76ef51ab610c80348ca7990788d57eb8
DLL
af44d1ee054626734a01d728bf8d18d3
EXE
5cf949316c40314d66b45f0bf00aa6f6
DLL
e06e61e0c1090f258610c69c91622a44
DLL
5594b465c901b743883fb5c0d483f158
EXE
127cd00925c1a2b759765c5b9600de30
DLL
885a585519842651f9f7f42c620b48e7