Hi. Thank you for your question and reaching out. I’d be more than happy to help you with your query
To find what is changing the value of the AutoConfigURL registry key, you can use the Microsoft Sysinternals Process Monitor tool. The steps you have outlined in your previous message are correct for using this tool to monitor registry changes.
Start Process Monitor and set a filter for the registry key that you want to monitor. To do this, click the Filter menu and select Filter. In the Filter dialog box, select the Path option and enter the registry key value: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL
Next, click the Add button to add this filter.
In the Process Monitor window, look for events with the Result column value of "NAME NOT FOUND". These events indicate a change was made to the registry key. The Operation column will show "RegSetValue" if the value was changed or "RegCreateKey" if a new key was created.
The Process Name column will show the name of the process that made the change, and the Detail column will show the exact value that was changed.
To stop capturing events, click the File menu and select Capture Events.
This will give you a detailed view of any changes made to the AutoConfigURL registry key and the process responsible for making the change.
If the reply was helpful, please don’t forget to upvote or accept as answer, thank you.