GorillaPrice is an advertising program that shows annoying ads when browsing most popular shops and other websites. It hijacks advertisements from Ebay, Amazon and other sites in hopes that one would press on these ads instead of the regular ones. It uses Yontoo platform for the promotion display. While they claim that this “helps” in searches for the best price, GorillaPrice collects your browsing information, causes a risk to your privacy and steals advertisement money from websites you visit.
One gets Gorilla Price installed together with “free” programs from various websites. Typically, it is a marginally useful program that can not hope someone will buy it, so the owners of it agree to bundled their software with adware and hijackers. Quite typically, other programs included in the same bundle are Optimizer Pro and Delta Search virus. Depending on the aggressiveness of these installers there might even be no way to refuse installing GorillaPrice or more dangerous programs. Even if you are ok with the breach of your browsing privacy and popups caused by GorillaPrice, you will most likely not want to ignore much more annoying functioning of other programs that came bundled with it. Thus it is obvious, that you should clean your PC in this case.
Another problem is GorillaPrice adware uninstall process. In many cases the uninstaller is not working or flagged as malware. So you might have to resort to RevoUninstaller or (even better) anti-malware tools like Spyhunter which can remove both GorillaPrice and related hijackers. Keeping antivirus up to date would help to prevent such infections.
If anti-malware programs are not available, a temporary fix is to disable Yontoo in all browsers. This would prevent GorillaPrice from working.
Google Chrome:
Press 3 horizontal lines -> Settings -> Extensions -> Remove Yontoo and everything GorillaPrice related.
Mozilla Firefox:
Firefox ->Add-ons, go through pluggin and extension list and delete everything Yontoo and Gorilla Price related.
Internet Explorer:
Open IE -> go Tools -> Manage Add-ons -> Remove everything Yontoo and Gorilla Price related from there.
Automatic Malware removal tools
(Win)
Note: Spyhunter trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions,
(Mac)
Note: Combo Cleaner trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Refund Policy ,
I spent several hours trying to remove this software and it nothing worked. I thought about it for a while and decided to try a low-tech solution and it appears to work (see everything I tried after this suggestion).
I noticed I couldn’t uninstall the program, delete the files or stop the GPI64Tool.exe process in Task Manager – it would shut down and then start up again in a few seconds. In processes, I did not have permission to stop the GorillaPrice or watgorp processes. Getting frustrated, I decided to do a little misdirect of my own:
Find all of the locations on your hard drive where Gorilla Price is located. Do a search on C: for GorillaPrice.exe and GPI64Tool.exe. You should discover them in C:\Program Files (x86)\GorillaPrice and C:\Users\All Users\GorillaPrice. You might need to change your Windows Explorer settings on the root directory so that you can see all program files (uncheck “hide protected system files,” check “show hidden files, folders and drives”). To get there, go to C: and click “Tools – Folder Options” and then go to the “View” tab.
Now, once you know where these files are, simply change the extensions to something that no longer works. For example, I changed the “.exe” to “.exx” and the “.dll” to “.dlx” I even changed the picture files. Why does this virus allow you to change the file extension while it does not allow you to delete the file? I have no idea, but once I changed the file extensions and rebooted my computer, this is what I discovered (with no problems on boot-up).
1 – GPI64Tool.exe was no longer listed on my Processes tab under Task Manager (use CTRL-ALT-DEL to get to Task Manager)
2 – GorillaPrice and Watgorp were listed under the Services tab on Task Manager but right-clicking on them seemed to indicate that they weren’t running. Previously, I would right-click and hit “stop service” and was denied. Now, “stop service” is ghosted out and “start service” was an option (no way was I going to try that).
I just did this a couple of hours ago and I haven’t seen anything that indicates it’s running. I’m keeping my fingers crossed.
Now, here are the other things I tried:
1 – Microsoft Security Essentials – Didn’t notice a thing was wrong
2 – Malwarbytes – Found some other adware but didn’t notice Gorilla Price (also tried their root kit beta program)
3 – Uninstall Gorilla Price from programs – Sends you to a web page that provides you with an exe file that is supposedly designed to remove Gorilla Price, but I’ve heard it’s a virus that will be immediately be quarantined by your virus software
4 – Deleting the Gorilla Price program files – Access was denied
5 – Tried to stop the process and services related to this program – Was either denied (in the case of the services) or the process just started up again, like magic.
Good luck
Greg: thanks for your input.
Had the same problem, managed to solve it using given method. Thanks!