Share via

Pls Help Microsoft Team Immediately

Furkan The Tech Loving Kid 0 Reputation points
2026-06-02T16:29:28.5333333+00:00

Hello my name is Furkan. Im just a kid (my parents give permission to me pls dont ban my acc ) and i love and know a lot about tech stuff. but i need help and its giving me chills. So i use a ASUS laptop. Its good and runs most of my apps but i have 2 unsolved problems i dont now how to fix. I would usually reinstall windows but i cant because its my elder brothers computer and he has important stuff in this because he is a soldier. You probably say "Its easy just backup the files and reset it after" but he still wont gave me permission to reset it. Every time i boot my laptop, a random website called Dongdonger.org pops up from microsoft edge. and sometimes (in any time, maybe in 10 minutes, maybe after days, just random times) a random CMD page pops open in the middle of my work, and sometimes it pops and closes normally, sometimes says "Task Succesfully Completed", sometimes it doesnt close and i have to close it manually and sometimes it pops up more at the same time (like 3-4). I contacted with asus help but they didnt respond. So please help me (and please make the new windows version more compatible for 2019 office computers dude😭😭😭😭)(and btw im suspicious about ransomware so PLS help because my brother would be upset if his important data gonna corrupt or something and i DID check "Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" and deleted explorer.exe "dondonger.org" but it just comes back after i boot up the laptop again)(and there may would be some typo's in the text i wrote because english is my 3rd language)(and i used EVERY single virus cleaning tool like kaspersky but even they couldnt find something😡😡😡😡) and is it possible to fix it or am i cooked?🤔😭😭

Windows for home | Windows 11 | Security and privacy

2 answers

Sort by: Most helpful
  1. Carl-L 16,165 Reputation points Microsoft External Staff Moderator
    2026-06-04T09:34:02.7533333+00:00

    Hello Furkan The Tech Loving Kid,

    Welcome to Microsoft Q&A forum.

    The website you see (dongdonger.org) as I checked is a website known for being a browser hijacker. So unfortunately, your computer is probably infected. On the bright side, it seems like it is not yet turn into ransomware.

    The program could be using Task Scheduler to operate, that can explain why it come back after you removed the registry entry. In this case, please try to follow these steps:

    • Remove from the task scheduler.
      1. Type "Task scheduler" in the search bar and press Enter.
      2. Go to Task Scheduler Library.
      3. Try to find all entries regarding the website name, explorer, cmd.exe or powershell.exe.
    • Use Autoruns.
      1. Download Autoruns from the official website.
      2. Open the apps and go to Logon tabs and Scheduled tasks tabs.
      3. Look for any entries referencing.
        • The website.
        • Weird EXE files in AppData.
        • cmd.exe or powershell.exe.
      4. Uncheck them to disable.
    • Clear Startup folder.
      1. Press Win + R to open the run dialog.
      2. Type shell:startup and press Enter.
      3. Delete anything seems suspicious.
      4. Go and checl C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup as well.
    • Clear registry deeply. Disclaimer: Generally, modifying registry subkeys or work group is intended for advanced users, administrators, and IT Professionals. It can help fix some problems, however, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For further protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click How to back up and restore the registry in Windows - Microsoft Support to view the article.
      1. While the directory you check is correct, it might not be the only one with that entry. In this case, please also check and remove the key from those entries.
        • Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
        • Computer\HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
        • Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
        • Computer\HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce.
    • Restart your computer when it is done.

    Please note that malware can still have hidden components somewhere that we might not aware of. So I would still suggest that you should backup your files and data and then clean install the computer to make sure that everything is alright.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?


  2. AI answer

    2026-06-02T16:29:49.28+00:00

    The behavior described (random website opening in Microsoft Edge and random Command Prompt windows appearing) strongly suggests unwanted software installed on the device.

    Unwanted software can:

    • Change browser settings so specific pages open automatically.
    • Run background tasks or scripts that show Command Prompt windows.
    • Make unauthorized changes to Windows settings.

    Because this is a shared device with important data, avoid risky actions like reinstalling Windows or deleting random files. Instead, follow these safer steps with a parent or trusted adult:

    1. Treat this as possible unwanted software
      • Unwanted software often comes from downloaded apps or installers that include extra programs.
      • Signs match what is documented: unexpected programs, changed browser behavior, and loss of control over settings.
    2. Run security checks
      • Use built-in security tools (such as Microsoft Defender) to run a full scan.
      • If any threats or unwanted software are detected, follow the prompts to quarantine or remove them.
    3. Check for tech support scams
      • If any pop-ups or pages claim to be from Microsoft and ask to call a phone number or give remote access, do not call and do not let anyone connect to the computer.
      • If a suspicious page appears and seems to “freeze” the browser, use Ctrl+Alt+Delete, open Task Manager, and end the browser task instead of following instructions on the page.
      • If a scam page or site is found, it can be reported using the guidance in “Protect yourself from tech support scams.”
    4. Ask an adult or the device owner for help
      • Because this is the elder brother’s computer and contains important data, any major changes (like resetting Windows or removing software that might affect work apps) should be done only with the owner’s permission.
      • If problems continue after scans and cleanup, the owner may need to contact official Microsoft Support or a trusted technician.

    If there is suspicion that the random website or Command Prompt behavior is linked to a scam or malicious site, report it as described in the tech support scam guidance.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.