If a desktop browser icon cannot be deleted and opening it always loads http://www.669dh.cn/?yhc1, treat it as a browser hijack or potentially unwanted app until proven otherwise. Start with reversible checks: identify the shortcut file, inspect the shortcut target, review browser startup settings, check extensions, and look at policy status. Do not begin by deleting random registry keys or disabling security software.
1. Locate the exact shortcut before deleting anything
Right-click the icon and open Properties. Note the shortcut’s actual location from the General tab or use Open file location if Windows offers it. The desktop may be redirected by OneDrive or stored in a public desktop folder, so do not assume that every icon is in only one of the two common desktop paths.
After you know which .lnk file you are looking at, open the Shortcut tab and read Target. Browser shortcuts can legally contain parameters such as --profile-directory, an enterprise profile path, or an intentional app/window URL created by the user. The red flag is not “anything after the EXE”; the red flag is an unwanted URL such as 669dh.cn, an unknown launcher, or parameters you did not authorize.
If the shortcut is in a managed work/school location or Windows asks for administrator permission, do not bypass ownership just to force deletion. Confirm whether the device is managed first, or ask the administrator to remove the policy or public shortcut.
For a personal, non-managed shortcut that you have confirmed is only opening an unwanted URL, make a reversible note first: copy the current Target text into a temporary text file. Then remove only the confirmed unwanted URL such as http://www.669dh.cn/?yhc1, keep legitimate parameters such as the browser profile flag, click Apply, close the Properties dialog, and reopen the shortcut. If the browser now opens normally and the URL does not return after reboot, you can remove the temporary note.
2. Reset the browser start page and home page
For Microsoft Edge, follow Microsoft’s browser home page instructions: open Settings, go to Start, home, and new tab page, and remove any unknown startup URL. Chrome has similar controls under Settings for startup and appearance. Also check the default search engine; some hijackers change both the home page and search provider.
3. Review extensions before reinstalling the browser
In Chrome, open chrome://extensions/. In Edge, open edge://extensions/. Disable suspicious extensions first, restart the browser, and then remove the one that caused the redirect. Google’s Google Chrome extension management help explains how to turn extensions on or off, remove them, and run anti-malware software if a suspicious program keeps changing extension files.
If the homepage resets again after extension cleanup, uninstall recently added “browser helper,” download manager, shopping, navigation, or security-toolbar programs from Windows Settings. Avoid removing drivers or antivirus components unless you know exactly what they are.
4. Check whether the browser is legitimately managed
Open chrome://policy or edge://policy. If you are using a work or school computer, a “managed by your organization” message may be legitimate. Google’s Chrome policy management documentation explains that organizations can enforce homepage, app, extension, and website policies. Microsoft Edge has a similar policy system for business environments.
On a personal computer, unknown policies that force a homepage or extension are suspicious. In that case, remove the related installed program first and run a security scan. Do not blindly delete policy registry entries from online snippets; if the machine is actually managed by an employer or school, you can break compliance settings.
5. Run a security scan for potentially unwanted apps
Microsoft documents Microsoft potentially unwanted app protection in Windows Security. Turn on reputation-based protection, scan the system, and take the recommended action when a potentially unwanted app is detected. A second scan with a reputable anti-malware tool is reasonable if the shortcut or homepage keeps returning.
When the problem is fixed
- The exact shortcut file has been identified, not guessed from a generic desktop path.
- The shortcut target no longer contains
669dh.cnor another unauthorized URL/launcher. - The browser startup page, home page, and search provider no longer mention
669dh.cn. - No unknown extension reappears after a restart.
chrome://policyoredge://policyshows no suspicious homepage or extension policy on a personal computer.- Windows Security no longer reports the same potentially unwanted app.