Removal Guide

Threat Level:
Rate this Article:
Comments (0)
Article Views: 843
Category: Browser Hijackers

Our researchers could only test how works on Google Chrome, but based on other similar threats, it should be compatible with Internet Explorer and Mozilla Firefox as well. The application is categorized as a browser hijacker since it may enter the system by changing specific browser settings. Users should also know that is not a reliable tool to search the Internet with because it might display advertising content, which could redirect to harmful web pages. If you continue reading this report, we will present you with more information about the threat. Moreover, we have also prepared a removal guide that you can use if you want to eliminate the application; it is located just a little below the article. is the website where users might find the browser hijacker’s installer or to be more precise, the setup file of a browser extension with a similar name (e.g. Watch Online Stream). Since we have researched quite a lot of similar threats already, we believe that same as the other tested applications, the extension should only install, add new toolbars, or make other changes to the browser. As you see, in most cases extensions related with such browser hijackers have exaggerated descriptions, and in reality, they might be rather useless. Unfortunately, some users learn it only after installing such suspicious programs.

What’s more, our specialists report that the mentioned website ( or extension could be promoted through malicious pop-up advertisements, which might be shown to you by other suspicious software, e.g. adware, potentially unwanted programs, and so on. Thus, if you encountered, you may want to consider scanning the system with a reliable antimalware tool. If there are any other possible threats, it would be best to remove from the computer before anything bad happens.

Furthermore, as you install the extension, it might make some changes to the browser like place an extra search bar, put a few bookmarks, and allow to replace your default search engine, homepage, or new tab page. These changes are probably the worst part as they may encourage you to use the search engine. Apparently, the browser hijacker might include unreliable advertising content leading to suspicious third-party web pages, and some of these sites could be even harmful. For instance, there could be web page distributing malicious software, e.g. Trojans, viruses, or other malicious programs. Also, the displayed third-party ads might promote similar threats, such as different browser hijackers, adware, etc.

For users who would not like to risk their computer's security with such a doubtful search engine, we would recommend the software’s removal. However, before you rush to erase it, we have to warn you that the manual deletion process could be too difficult for some users. Therefore, you should see the instructions first and only then decide what could be the best solution, because the application can be removed more easily with a reliable antimalware tool. All there is to do is to install the antimalware software, set it to perform a full system scan and press the deletion button that should be displayed after the scanning is over.

Remove from browsers

Internet Explorer

  1. Press Windows Key+R, type Regedit and click OK.
  2. Use the Registry Editor to locate this path: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
  3. Search for a value name that is called Start Page, right-click it and choose Modify.
  4. Replace the given value data ( with a web page you would prefer and click OK.
  5. Go to the provided path: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
  6. Look for a key titled as WatchOnlineStreams, OnlineStreams, or similarly, then right-click it and select Delete.
  7. Close the Registry Editor.

Mozilla Firefox

  1. Press Windows Key+E and look for this directory: %APPDATA%\Mozilla\Firefox\Profiles\{unique user profile}\extensions
  2. Look for a file titled as @Streams.xpi, @Watch.xpi, or similarly, then right-click it and select Delete.
  3. Then go to %APPDATA%\Mozilla\Firefox\Profiles\{unique user profile}
  4. Locate a file called prefs.js and open it with Notepad.
  5. Erase the whole following line or just replace the link in it: user_pref(“browser.startup.homepage”, “”).
  6. Press Ctrl+S and close prefs.js.

Google Chrome

  1. Launch the Explorer and search for this directory: %LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions
  2. Search for a folder called mlpbjcjcpehmeenjdodjemcfemhokfkm, right-click this folder and select Delete.
  3. Navigate to this path: %USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default
  4. Find another folder called mlpbjcjcpehmeenjdodjemcfemhokfkm, right-click and select Delete.

Remove from other Google Chrome profiles

  1. Open the Explorer (Windows Key+E).
  2. Go to the listed directories separately:
    %USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\{Unique user profile}\Extensions
    %LOCALAPPDATA%\Google\Chrome\User Data\{Unique user profile}\Extensions
  3. Look for folders named as mlpbjcjcpehmeenjdodjemcfemhokfkm, right-click them one by one and press Delete.
  4. Then navigate to the following directories separately:
    %LOCALAPPDATA%\Google\Chrome\User Data\Default\Local Storage
    %USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage
  5. Locate and erase the listed files:
  6. Find the provided path: %USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default
  7. Look for data called Preferences and Secure Preferences, right-click these files separately and press Delete.
Download Remover for *
*SpyHunter scanner, published on this site, is intended to be used only as a detection tool. To use the removal functionality, you will need to purchase the full version of SpyHunter. Screenshots:


Your email address will not be published.


Enter the numbers in the box to the right *