What is is a search engine that comes with a browser extension called Download Converter Now. The software might appear to be useful if you convert documents or other files on a daily basis, but we would advise you to look for a more reliable tool. The application is considered to be a browser hijacker because of its need to modify user’s default browser settings. What’s more, if you use the search engine you might accidentally interact with content that could be dangerous to the system. Apparently, might display unreliable third-party ads with the search results, and if you click them, such content could lead you to malicious web pages. Naturally, we would advise users not to take any risks with the application and get rid of it as fast as possible. To erase the browser hijacker manually, you can take a look at the removal instructions located below the text.testtesttest

Where does come from?

As it was said in the beginning the threat comes together with an add-on known as Download Converter Now. This add-on is available through the software’s official website (, although our researchers at think it could be distributed with suspicious ads as well. In that case, users could receive the browser hijacker while clicking such advertisements. If that is how you installed, we would advise you to be more careful with your clicks in the future. Also, it would be advisable to check the system for untrustworthy programs since usually ads promoting such unreliable software are shown by other similar threats.

How does work?

Once the mentioned extension is installed, it should add a toolbar with an additional search box and links to various web pages. The application may also replace your default search engine, homepage, or new tab page with Below the browser hijacker’s search box there are integrated file converters, and if you need a tool to convert your files into PDF or DOC documents, the application might appear to be rather handy. Unfortunately, we have to warn you that the search engine itself cannot be trusted.

According to our researchers, uses a modified Yahoo search engine. In other words, the results might be gathered by, but they could also be modified by the browser hijacker before they are displayed to the user. For example, the application might inject the results with unreliable advertisements from the software’s third-party partners. Therefore, if you search the Internet with this application, there is a chance you may encounter ads leading to malicious web pages. They could advertise other similar threats like adware, potentially unwanted programs, other browser hijackers or even malicious programs, e.g. Trojans, viruses, and so on.

How to remove

The search engine should disappear if you remove the extension it came with and delete or modify particular browser’s data. If you think you can manage to get rid of the browser hijacker, take a look at the instructions placed below, choose steps according to the browser you use and follow them carefully. However, if it appears to be too difficult, keep it in mind that you can use a reliable antimalware tool too. Once it is installed, users should scan the system and wait till or other suspicious applications are detected. After that, you only have to click the deletion button, and the tool will eliminate the threats for you.


Internet Explorer

  1. Press Win+R, type Regedit, and click OK.
  2. Locate this particular directory HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
  3. Find a specific value name called Start Page, then right-click it and select Modify.
  4. Replace with a website you like and click OK.
  5. Search for this path HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall
  6. Look for a key called ab9e9e9c99ca61ac, then right-click it and click Delete.
  7. Close the Registry Editor and open Internet Explorer.
  8. Press ALT+X, select Manage add-ons, then pick Toolbars and extensions.
  9. Find extension related to and remove it.

Mozilla Firefox

  1. Press Win+E to open the Explorer.
  2. Locate this particular path %APPDATA%\Mozilla\Firefox\Profiles\{user profile}\extensions
  3. Find a file named as @Converter.xpi, then right-click it and select Delete.
  4. Go to this specific directory %APPDATA%\Mozilla\Firefox\Profiles\{user profile}
  5. Search for a file called prefs.js and open it with Notepad.
  6. Find the following line user_pref(“browser.startup.homepage”, “”) and replace the link within with a reliable website.
  7. Press Ctrl+S and close the document.

Google Chrome

  1. Launch the Explorer (Win+E) and locate this directory: %LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions
  2. Search for a folder called mdldnoamigemekcindkmgkbgnncfphce, right-click it and press Delete.
  3. Find this directory %USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default
  4. Locate another folder named as mdldnoamigemekcindkmgkbgnncfphce, right-click and select Delete.
  5. Look for this path %UserProfile%\Local Settings\Application Data\Google\Chrome\User Data\Default
  6. Find files called Preferences and Secure Preferences, right-click them separately and choose Delete.

Remove from other Google Chrome profiles

  1. Open the Explorer (Win+E).
  2. Search for these following directories separately:
    %USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\{Profile.*}\Extensions
    %LOCALAPPDATA%\Google\Chrome\User Data\{Profile.*}\Extensions
  3. Find folders called mdldnoamigemekcindkmgkbgnncfphce, right-click them separately and press Delete.
  4. Navigate to these listed directories separately:
    %LOCALAPPDATA%\Google\Chrome\User Data\Default\Local Storage
    %UserProfile%\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage
  5. Find and erase these files:
100% FREE spyware scan and
tested removal of*

Leave a Comment

Enter the numbers in the box to the right *