How I Resolved the Startup Browser Redirect to an Unsafe Site

Dealing with unexpected browser behavior upon startup can be incredibly frustrating. Recently, I faced an issue where a command prompt window would briefly appear, followed by my browser navigating to a suspicious website, specifically “ururgisha[.]net”. Fortunately, I managed to resolve this issue. Here’s a step-by-step guide on how I tackled it.

Step 1: Inspecting the Windows Registry for Unwanted Startup Entries

The first part of my solution involved checking the Windows Registry for any entries that could trigger the unwanted browser redirect.

1. I began by launching the Registry Editor. By pressing Win + R, I opened the Run dialog, typed regedit, and hit Enter.
2. I navigated to the following path: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run.
3. Upon inspection, I discovered an entry labeled with my username, which showed a command resembling cmd.exe /c start www\[.\]dongdonger\[.\]org.
4. I then deleted this suspicious entry by right-clicking on it and selecting Delete.

Step 2: Checking Task Scheduler for Unrecognized Tasks

Next, I turned my attention to the Task Scheduler, where unwanted scripts might be set to run at startup.

1. I accessed the Task Scheduler by pressing Win + R, typing taskschd.msc, and hitting Enter.
2. I navigated to the “Task Scheduler Library”.
3. After scanning through the tasks, I located one named after my user account.
4. When I right-clicked on the task and opened Properties, I found that it was configured to execute cmd.exe /c start www\[.\]dongdonger\[.\]org.
5. To eliminate this hazard, I deleted the entire task by right-clicking and selecting Delete.

![Task Scheduler](https://preview.redd.it/365llbgpkxee1.png?width=1506&format=png&auto=webp&s=b53d3eed0cd2c2d960dc52b690ea864