I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
Be careful! Full path on computer: %LOCAL APPDATA%\MAIL.RU\GOCHROMIUMNATIVEHOST\NATIVE_HOST_APP.EXE
NATIVE_HOST_APP.EXE is a pretty popular virus.
You can get it on your computer while downloading it bundled with some free software.
Sadly, most free downloads do not disclose that other programs will be installed, so you are more likely to get NATIVE_HOST_APP.EXE on your PC without your own knowledge.
After being downloaded, NATIVE_HOST_APP.EXE hijacks your browser and changes search settings.
NATIVE_HOST_APP.EXE also causes an appearance of popup ads and browser redirecting.
NATIVE_HOST_APP.EXE is very annoying and hard to get rid of.
Make a full backup of your PC before starting.
Follow the next steps to make your system clean again:
Removal guide for NATIVE_HOST_APP.EXE:
- Uninstall NATIVE_HOST_APP.EXE using Windows uninstallation applet (use Add/Remove Programs or Uninstall Program or Apps & features).
- Open Task Manager and terminate "NATIVE_HOST_APP.EXE" processes.
- Use Windows search to find and remove "NATIVE_HOST_APP.EXE" files and folders.
- Run services.msc and disable a "NATIVE_HOST_APP.EXE" Windows service.
- Execute taskschd.msc to get rid of "NATIVE_HOST_APP.EXE" scheduled tasks.
- Open regedit.exe and delete NATIVE_HOST_APP.EXE registry keys and values.
- Inspect the properties of your desktop and Start menu shortcuts for NATIVE_HOST_APP.EXE presence and "http://" links.
- Open your browser and disable NATIVE_HOST_APP.EXE plugins. Disable all unknown plugins. Reset the browser settings.
- Clean your Recycle bin and temporary files.
- Restart your computer and check results.
Related Files:
%LOCAL APPDATA%\AMIGO\USER DATA\SHADERCACHE\GPUCACHE\INDEX
%LOCAL APPDATA%\MAIL.RU\GOCHROMIUMNATIVEHOST\MANIFEST.JSON
%LOCAL APPDATA%\MAIL.RU\GOCHROMIUMNATIVEHOST\NATIVE_HOST_APP.EXE
%APPDATA%\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\?????.LNK
%APPDATA%\MICROSOFT\WINDOWS\RECENT\CUSTOMDESTINATIONS\D93F411851D7C929.CUSTOMDESTINATIONS-MS
File Information NATIVE_HOST_APP.EXE:
Virustotal = 1/57
MD5 = 7336F1E3ECA0F095CC5ED279804026D3
File Size: 2270936
OriginalFilename: chromium_host_app.exe
FileDescription: Mail.Ru Chromium Host App
InternalName: chromium_host_app
CompanyName: Mail.Ru
FileVersion: 3.2.0.12
LegalCopyright: Copyright 2015