home

uninstaller.gorillaprice.com

GlobalDnsProvider.com Inc

Domain Information

The domain uninstaller.gorillaprice.com registered by GlobalDnsProvider.com Inc was initially registered in March of 2010 through TLDS, LLC DBA SRSPLUS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Buffalo, New York within the United States which resides on the ColoCrossing network.
Registrar:
TLDS, LLC DBA SRSPLUS

Server location:
New York, United States (US)

Create date:
Tuesday, March 2, 2010

Expires date:
Thursday, March 2, 2017

Updated date:
Wednesday, March 2, 2016

ASN:
AS36352 AS-COLOCROSSING - ColoCrossing,US

Root domain:
gorillaprice.com

Whois:
3 gorillaprice.com records

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (75% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.GorillaPrice.Meta (M), PUP.GorillaPrice.Installer.Meta (M)
75.00%

Trend Micro House Call
TROJ_GEN.F47V0914, TROJ_GEN.F47V0908
25.00%

Qihoo 360 Security
HEUR/Malware.QVM06.Gen
12.50%

The domain uninstaller.gorillaprice.com has been seen to resolve to the following 2 IP addresses.

172.245.127.102
unused.installertech.com
February 12, 2016

184.107.203.27
February 8, 2014

File downloads found at URLs served by uninstaller.gorillaprice.com.

1 / 68      (PUP)
http://uninstaller.gorillaprice.com/Gorilla_Uninstaller_Download_File.exe  (ce18455f99e4f3f3963acfcf39d182c8)

1 / 68      (PUP)
http://uninstaller.gorillaprice.com/Gorilla_Uninstaller_Download_File.exe  (fbae0569433450b51eb924057777b7d2)

1 / 68      (PUP)
http://uninstaller.gorillaprice.com/Gorilla_Uninstaller_Download_File.exe  (a370cdea429fa967e398d736b8198721)

2 / 68      (PUP)
http://uninstaller.gorillaprice.com/Gorilla_Uninstaller_Download_File.exe  (361b028a5df3b957c5ec3aa39e4ed912)

1 / 68
http://uninstaller.gorillaprice.com/Uninstaller_Download.exe  (03aa13bd77bbb9eadfbdfa3f66b504fb)

1 / 68      (PUP)
http://uninstaller.gorillaprice.com/Gorilla_Uninstaller_Download_File.exe  (9cd0de2bf6e45f17785368a549e3be89)

1 / 68      (PUP)
http://uninstaller.gorillaprice.com/Gorilla_Uninstaller_Download_File.exe  (1c9e4b6a5882dc4f3c2716206f268f8a)

1 / 68
http://uninstaller.gorillaprice.com/Gorilla_Uninstaller.exe  (2210db8dee8022c878cfdbf3c4ed3454)

The following 157 files have been seen to comunicate with uninstaller.gorillaprice.com in live environments.

TCP » 172.245.127.102:80
InstantSupport.exe (InstantSupport by Installer Technology)

TCP » 172.245.127.102:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 172.245.127.102:80
InstantSupport.exe (InstantSupport by Installer Technology)

TCP » 172.245.127.102:80
InstantSupport.exe (InstantSupport by Installer Technology)

TCP » 172.245.127.102:80
InstantSupport.exe (InstantSupport by Installer Technology)

TCP » 172.245.127.102:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 172.245.127.102:80
InstantSupport.exe (InstantSupport by Installer Technology)

TCP » 172.245.127.102:80
InstantSupport.exe (InstantSupport by Installer Technology)

TCP » 172.245.127.102:80
pc.exe (PCAcceleratePro & Instant support by Installer Technology)

TCP » 172.245.127.102:80
pcinst.exe (PCAcceleratePro & Instant support by Installer Technology)

TCP » 172.245.127.102:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 172.245.127.102:80
InstantSupport.exe (InstantSupport by Installer Technology)

TCP » 172.245.127.102:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 172.245.127.102:80
InstantSupport.exe (InstantSupport by Installer Technology)

TCP » 172.245.127.102:80
InstantSupport.exe (InstantSupport by Installer Technology)

TCP » 172.245.127.102:80
pcinst.exe (PCAcceleratePro & Instant support by Installer Technology)

TCP » 172.245.127.102:80
InstantSupport.exe (InstantSupport by Installer Technology)

TCP » 172.245.127.102:80
pc.exe (PCAcceleratePro & Instant support by Installer Technology)

TCP » 172.245.127.102:80
wcmasc.exe

TCP » 172.245.127.102:80
pc.exe (PCAcceleratePro & Instant support by Installer Technology)

 
Latest 20 of 159 files

URL:
http://uninstaller.gorillaprice.com/

Web server:
nginx/1.5.12

finding.discount

mysafesavings.com

gorillaremover.com

gorillauninstallation.com

gpremoveinstallation.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.