Captcha Resolving Virus

Captcha Resolving

Captcha Resolving is a Chrome and Firefox add-on that falls under the browser-hijacking category because it changes the homepage and the new-tab page without permission. Captcha Resolving uses the new homepage/new-tab page addresses to promote certain sites and to spam the users’ screens with ads.

Captcha Resolving

The Captcha Resolving virus will display pop up ads and windows

If you are familiar with this potentially unwanted app because it has already gotten installed in your computer, then you should definitely read the current post as it will help you better understand the specifics of the unwanted software and the potential dangers related to it.

First and foremost, we must tell you what the goal of Captcha Resolving is. This undesirable app is aimed at feeding ads to your browser after replacing the main search engine, the homepage, and the new-tab page with ones of its own. It uses the newly-introduced browser elements to redirect the user to different sites that it tries to popularize by drawing more traffic to them. For example, the new homepage/new-tab page addresses automatically generate visits to their respective sites each time you start the browser or open a new tab. In addition, the search engine imposed on your browser by the hijacker is probably a modified version of a popular search engine such as Google, Bing, or Yahoo. This modified version has probably been set to favor a bigger number of advertised results instead of showing the users the most relevant entries. This further makes browsing less optimized and more time-consuming as you’d be spending more time finding the information you are interested in among the ads and sites promoted by the hijacker.

Dangers related to Captcha Resolving

Most users who get Captcha Resolving or other similar apps installed in their browser tend to get scared by the presence of the undesirable software, thinking it might be some serious malware infection such as a Trojan horse virus or a file-encrypting Ransomware virus that will get their data locked and then ask them to pay a ransom for its liberation. Captcha Resolving is neither of those things nor is it anything else that can damage your computer or corrupt your important files. However, it is still not a kind of software you should trust and keep in your computer and there are several reasons for that.

The first and more obvious reason is the irritation triggered by the ads, the redirects, and the unpleasant browser changes. For most users, this is more than enough to decide to uninstall the hijacker.

However, there is a second, more important reason, why removing Captcha Resolving from your computer is something you must do as soon as possible. Apps like it don’t typically control the flow of ads and redirects based on how reliable the advertising source is. This means that you can get linked to reliable and legitimate sites that sell something useful but you could also land on pages that try to trick you and get you to download low-quality software or even Ransomware, Trojans, or other hazardous virus programs. Because of this, even if you don’t mind the ads all that much, it is still essential that you have the hijacker generating them removed from your computer.


Name Captcha Resolving
Type  Browser Hijacker
Detection Tool

anti-malware offerOFFER *Read more details in the first ad on this page, EULA, Privacy Policy, and full terms for Free Remover.

Remove Captcha Resolving Virus

Captcha Resolving may install one or more extensions in the main browser of your system. If you find and remove these extensions, you have a high chance to deal with the browser hijacker quickly and without the need for additional instructions. That’s why the first thing we suggest you to do is try out this method:

  1. Click on the hijacked browser’s settings icon >>>More Tools (or Add-ons).
  2. Once you get there, find the Extensions tab and open it.
  3. In the Extensions tab, search for the Captcha Resolving extension/s and remove them. (Click on the related Remove/Trash bin icon).
  4. If any other questionable or potentially unwanted extensions grab your attention, remove them too. In general, no extensions are essential for the operation of your browser.
  5. Once you are done, restart the problematic browser and see how it behaves now.

If Captcha Resolving is still present and is disturbing you, please follow the ellaborate instructions in the Captcha Resolving removal guide below.


Attention! Some of the steps in this guide will require a system and browser restart. Therefore, it is advisable that you Bookmark the page with these removal instructions so you can quickly refer back to it and complete the guide.

Once you bookmark the page, please reboot your computer in Safe Mode with the help of the instructions from the provided link. When you complete the steps there, get back to this guide and proceed to the next step.



With the help of the CTRL + SHIFT + ESC key combination, open the Windows Task Manager and go to the Processes Tab (on Win 8 and 10 it is named “Details“).

Next, search for processes that are operated by Captcha Resolving and once you find such a process, right-click on it and select the first option called Open File Location:


It might be difficult to decide if the files related to the selected process are really dangerous just by looking at them, therefore, we advise you to scan them with the free online virus scanner below:

Each file will be scanned with up to 64 antivirus programs to ensure maximum accuracy
This scanner is free and will always remain free for our website's users.
This file is not matched with any known malware in the database. You can either do a full real-time scan of the file or skip it to upload a new file. Doing a full scan with 64 antivirus programs can take up to 3-4 minutes per file.
Drag and Drop File Here To Scan
Drag and Drop File Here To Scan
Analyzing 0 s
Each file will be scanned with up to 64 antivirus programs to ensure maximum accuracy
    This scanner is based on VirusTotal's API. By submitting data to it, you agree to their Terms of Service and Privacy Policy, and to the sharing of your sample submission with the security community. Please do not submit files with personal information if you do not want them to be shared.

    If the scan results show that there is a danger in any of the scanned files, end the related processes (select it>right-click>End Process) and delete the scanned files and their folders from their file location.


    Open a Run window on the screen by using the Start and R keyboard key combination.

    Next, type appwiz.cpl in the Run window and click OK.


    This command will open a Control Panel window where you will be able to review all apps that are presently installed on your computer. Your task there will be to search the list of apps for suspicious entries that could be related to Captcha Resolving or could have introduced the browser hijacker in the system. If you find any, Uninstall it/them by selecting them and clicking on the Uninstall button at the top.

    Aside from uninstalling bogus apps that could have introduced Captcha Resolving on your computer, it is equally important to disable any startup entries that the hijacker may have added to the system. For that, type msconfig in the Windows search field and press enter. You should be able to see the System Configuration window on your screen. Select Startup and remove the checkmark from the entries that seem to have a relation to the browser hijacker. Once you are done, click OK and close the window.



    With the help of a Start and R key combination open a new Run window.

    Use the copy/paste command to place the following line in the Run window:

    notepad %windir%/system32/Drivers/etc/hosts

    Click OK and a new file named Hosts will open. Find Localhost in the text and check if any suspicious IP addresses have been added there. For more explanation look at the example image below:

    hosts_opt (1)

    In case there are suspicious IPs below “Localhost” in your Hosts file (just as in the example image), please leave us a comment below this post with a copy of the IPs. A member of our team will take a look at them and will tell you if they are dangerous and need to be deleted.

    If you see nothing suspicious, proceed to the next instructions.

    Open Network Connections by typing it in the Windows search field. After that, follow the next instructions in the order that they are explained. This will clear up any DNS changes that Captcha Resolving might have made without your approval.

    1. Right-click on the Network Adapter that is in use —> Properties
    2. In the new window scroll and find Internet Protocol Version 4 (ICP/IP). Select it and click —> Properties.
    3. Select Obtain DNS server address automatically and then click on Advanced
    4. In the Advanced TCP/IP Settings click on the DNS tab. If there is something suspicious added there, remove it and click OK to save the changes.



    • The instructions that follow will help you remove any traces of Captcha Resolving from your browsers. It is very important that you apply the steps for all browsers that are installed on your computer. Otherwise, the browser hijacker may reappear and disturb you again.

    Right-click on the shortcut icon of the hijacked browser and select —> Properties.

    NOTE: The instructions we are showing here are for Google Chrome, but they are applicable for Firefox and IE (or Edge) too.


    Properties —–> select the Shortcut tab.

    In Target, remove everything after .exe.

    Browser Hijacker Removal Instructions

    ie9-10_512x512  Remove Captcha Resolving from Internet Explorer:

    Open IE, click  IE GEAR —–> Manage Add-ons.

    pic 3

    Find the add-ons that seem to be problematic and select —> Disable.

    Go to IE GEAR —–> Internet Options —> change the URL of the homepage (if hijacked) —> Apply.

     Remove Captcha Resolving from Firefox:

    Open Firefoxclick  mozilla menu  ——-> Add-ons —-> Extensions.

    Remove any extensions linked ot the hijacker by clicking on their Remove button.

    pic 6

    Remove Captcha Resolving from Chrome:

    Close Chrome. Open My Computer (Computer in Win 10) and click on the C drive. Then navigate to:

     C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. 

    Find a folder with the name “Default” inside:

    Rename the Folder to Backup Default

    Right-click that folder and rename it to Backup Default. Then restart Chrome and see if there are signs of the browser hijacker in it.


    Open the Registry Editor by typing Regedit in the windows search field and pressing Enter.

    Inside, press CTRL and F and type the browser hijacker’s Name in the Find dialog box.

    Right-click on each of the entries that are found to delete them.

    When no more entries are found with the Find function, go manually to these directories and delete/uninstall anything suspicious that you find in them:

    • HKEY_CURRENT_USER—-Software—–Random Directory.
    • HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    • HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

    Important! Making changes and deletions in the Registry may have a serious impact on the overall stability and performance of your system. If you are unsure about a given entry, it is best to use a professional removal tool in order to avoid involuntary system corruption.

    About the author


    Brandon Skies

    Brandon is a researcher and content creator in the fields of cyber-security and virtual privacy. Years of experience enable him to provide readers with important information and adequate solutions for the latest software and malware problems.

    Leave a Comment