Fandom

Malware Wiki

Adware:Win32/PriceGong

1,346pages on
this wiki
Add New Page
Comments0 Share

Adware:Win32/PriceGong is an Adware program that displays certain deals related to search terms you enter in any webpage's search field.

We detect Adware:Win32/PriceGong because it opens advertisements that appear independently outside the context of the program, website, or other source the advertisements are promoting.

For more information about how and why we identify potentially unwanted software, such as Adware:Win32/PriceGong, please see our evaluation criteria resource page.

Info

Symptoms

The appearance of offers in pop-up windows which state they are "Powered by PriceGong" may indicate the presence of Adware:Win32/PriceGong on your computer. 


Technical Information (Analysis)

Adware:Win32/PriceGong may be installed from the program's website:


Installation

When run, the installer for Adware:Win32/PriceGong installs the program into folders named "PriceGong" in %ProgramFiles% and %APPDATA%.

Note: %ProgramFiles% refers to a variable location that is determined by the software by querying the operating system. The default location for the Program Files folder for Windows 2000, XP, 2003, Vista, 7, and 8 is "C:\Program Files".

Note: %APPDATA% refers to a variable location that is determined by the malware by querying the operating system. The default location for the Application Data folder for Windows 2000, XP, and 2003 is "C:\Documents and Settings\<user>\Application Data". For Windows Vista, 7, and 8, the default location is "C:\Users\<user>\AppData\Roaming".

It also creates an entry in the <start menu> called "PriceGong", which contains links to the program's website, help information, and the software's uninstaller, as follows:


Note: <start menu> refers to a variable location that is determined by the software by querying the operating system. The default location for the Start Menu folder for Windows 2000, XP, and 2003 is "C:\Documents and Settings\<user>\Start Menu" or "C:\Users\<user>\Start Menu". For Windows Vista, 7, and 8, the default location is "C:\Users\<user name>\AppData\Roaming\Microsoft\Windows\Start Menu".

Adware:Win32/PriceGong installs itself as a BHO (browser helper object), which can be seen in Internet Explorer's Manage Add-ons window, as in the following screenshot:


Adware:Win32/PriceGong creates an installation entry in the Programs and Features section of the Control Panel, as follows:


Running this uninstaller removes Adware:Win32/PriceGong from your computer.

Execution

Once installed, Adware:Win32/PriceGong displays offers to you as you browse the Internet, as in the following example:


These offers are presented in separate windows that sit outside of your normal web browser window.

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.