GorillaPrice
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 50 % (Medium) |
| Infected Computers: | 43,362 |
| First Seen: | August 1, 2013 |
| Last Seen: | October 24, 2025 |
| OS(es) Affected: | Windows |
GorillaPrice is a browser add-on, which gives Internet users a variety of coupons, savings, and offers. GorillaPrice is beneficial to many online shoppers because it helps to save money through numerous deals and coupons. However, GorillaPrice is identified as an adware program by security researchers. Numerous computer users are not aware of how GorillaPrice invaded the PC. Therefore, GorillaPrice is classified as GorillaPrice Virus by some PC users. GorillaPrice usually comes packaged with freeware or shareware applications. When GorillaPrice accesses the corrupted PC, it shows disturbing pop-up advertisements on the desktop of the computer. These advertisements pose a risk to the compromised PC if the computer user clicks on links. Scammers are using unidentified services such as GorillaPrice to deliver a variety of malware threats to victimized computers. GorillaPrice is also used by cybercrooks to make money from click fraud. GorillaPrice also records the attacked PC user's browsing activities on the compromised Internet browser. GorillaPrice traces the victim's browsing habits, is aware of the most visited websites, and is aware of which products the affected computer looks for the most.
Table of Contents
Aliases
12 security vendors flagged this file as malicious.
| Antivirus Vendor | Detection |
|---|---|
| AVG | Generic6.PID |
| McAfee-GW-Edition | RDN/Generic PUP.x!c2y |
| Comodo | ApplicUnwnt |
| Avast | Win32:Injector-COO [Trj] |
| Symantec | Trojan.Gen.2 |
| K7AntiVirus | Adware ( 004bb5b41 ) |
| Sophos | Generic PUA NL |
| Symantec | WS.Reputation.1 |
| Avast | Win32:Dropper-gen [Drp] |
| AVG | Generic6.MGL |
| McAfee | Artemis!F0095C66445B |
| McAfee-GW-Edition | BehavesLike.Win32.BadFile.ch |
SpyHunter Detects & Remove GorillaPrice
File System Details
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | WatGorp.exe | 770616105a224fed755977eb86de74e4 | 2,739 |
| 2. | GorillaPrice.exe | c7905e4b74338875c3e83984f4bc5921 | 2,732 |
| 3. | GPI64Tool.exe | 2fee07aa67233c4206bb0ff3b35c0562 | 1,435 |
| 4. | GPCheck.exe | 97e0a4ea3f659ce172398f78d9db8716 | 1,028 |
| 5. | wuhelper.exe | ed39bba17f83ea8433f7059f36a887f6 | 463 |
| 6. | GpRecover.exe | b1cc7b1ac2eebd4866ce79d6ff7c45eb | 350 |
| 7. | bootmanager.exe | fef01c38e7eab2d03baf57f4c35729b9 | 236 |
| 8. | runtimemanager.exe | 09a41ac411d3436e186a17e7ff788dc1 | 30 |
| 9. | ntcache.exe | fd9e09258034096a15d9b0da2b766d44 | 12 |
| 10. | grillaprice.exe | 6bade1f54528012e559b60131f7f1147 | 10 |
Registry Details
Directories
GorillaPrice may create the following directory or directories:
| %ALLUSERSPROFILE%\GorillaPrice |
| %ALLUSERSPROFILE%\Microsoft\Windows\MKStat |
| %ALLUSERSPROFILE%\Microsoft\Windows\MKeeperStat |
| %PROGRAMFILES%\GrillaPrice |
| %PROGRAMFILES(X86)%\GorillaPrice |
| %PROGRAMFILES(x86)%\GrillaPrice |
| %PROGRAMFILES(x86)%\Windows Media Player\grillaprice |
| %ProgramFiles%\GorillaPrice |
URLs
GorillaPrice may call the following URLs:
| GorillaPrice |
