Three Captcha Virus

7-day Free Trial w/Credit card, no charge upfront or if you cancel up to 2 days before expiration; Subscription price varies per region w/ auto renewal unless you timely cancel; notification before you are billed; 30-day money-back guarantee; Read full terms and more information about free remover.

*Source of claim SH can remove it.

Three Captcha

Three Captcha is a potentially unwanted program that modifies the web browser’s settings without users’ consent. The purpose of Three Captcha is to put paid advertisements on the screen during browsing sessions.

Three Captcha

If you are on this page, you’ve most likely discovered some odd changes to the homepage and/or the default search engine of your Chrome, Edge or Firefox browser or you’ve been getting bombarded by a massive amount of ads, pop-ups, and banners as you’ve been trying to browse the web. These are all common indicators of the presence of a browser hijacker such as Three Captcha on your computer, without counting the less frequently observed ones that might include screen freezing, browser unresponsiveness, sudden crashes, and longer page loading times. In this article, however, we’ve prepared a detailed removal guide that will help you uninstall Three Captcha and remove all the nagging ads and browser changes once and for all. So, in case you are desperate to bring your browser’s settings back to normal, just stick to our guide and follow its instructions.


ThreeCaptcha don’t typically have the ability to replicate itself like computer viruses, steal sensitive information from you like Trojans, apply encryption or delete your files like Ransomware, or do some other harm. Nevertheless, such programs, including new representatives like the ThreeCaptcha, may expose you to some security risks that you should be aware of, especially if you are wondering whether to uninstall this software from your PC or not.

For instance, the advertisements the browser hijacker may display are something you must not disregard as a mere annoyance. With the increased popularity of malvertisements as a means of virus distribution, ads have become a major carrier of various stealthy infections such as Ransomware, Trojans, and Spyware. And the fact that hundreds of aggressive ads, links, pop-ups, and misleading messages can show up on your screen thanks to a program like Three Captcha means that there is always a risk of accidentally landing on a malicious or misleading message.

The Virus

Now, it is unlikely that the virus will deliberately redirect you to malicious advertisements or do anything to expose you to danger. However, cyber criminals tend to target genuine advertising messages and insert malicious software into them without no one knowing about that. Such ads can then circulate around the web, and sneak inside the stream of ads generated by programs such as the virus.

The worst part is that there is no way to detect those malvertisements or the infections they transmit before it is too late because they typically look absolutely legitimate.

With the above in mind, our best advice is for you is to avoid interacting with any online ads, links, or banners that have randomly popped up on your screen. With a browser hijacker in the system, however, avoiding ads can be difficult, if not impossible. That’s why we recommend you use the removal guide below to safely detect and remove Three Captcha from your system. This will also enable you to regain control over your default web browser and restore all your previous web browsing settings.


NameThree Captcha
Type Browser Hijacker
Detection Tool

*Source of claim SH can remove it.

Remove Three Captcha Virus

In some cases, it may be possible to remove Three Captcha quickly with the help of the following instructions:

  1. Open the affected browser and from its main menu select More Tools (in some browsers it is found as Add-ons).
  2. Once you get there, select the Extensions tab.
  3. In the list of extensions that appear,  search for the Three Captcha extension and remove it.
  4. Also, remove any other questionable-looking extensions in the list that aren’t necessary for the operation of the browser.

If after you do this, Three Captcha is still causing you disturbance, then use the more detailed instructions in the removal guide that starts here: 


To prepare yourself for the quick and effective removal of Three Captcha, make sure that you Bookmark the page of this removal guide so you don’t lose it and reboot the computer in Safe Mode.



*Source of claim SH can remove it.

Once the computer is booted in Safe Mode, use the CTRL + SHIFT + ESC key combination to open the Windows Task Manager. When it launches, click on the Processes Tab, also known as the “Details” Tab on Windows 8 and 10. You should see all the processes that are currently running on the computer listed in this tab. Search for processes that seem to be related to Three Captcha. When you find them, right-click on each of them individually and click on the Open File Location option from the pop-up menu.


Use the free online virus scanner below to scan the files in that location for malware:

Each file will be scanned with up to 64 antivirus programs to ensure maximum accuracy
This scanner is free and will always remain free for our website's users.
This file is not matched with any known malware in the database. You can either do a full real-time scan of the file or skip it to upload a new file. Doing a full scan with 64 antivirus programs can take up to 3-4 minutes per file.
Drag and Drop File Here To Scan
Drag and Drop File Here To Scan
Analyzing 0 s
Each file will be scanned with up to 64 antivirus programs to ensure maximum accuracy
    This scanner is based on VirusTotal's API. By submitting data to it, you agree to their Terms of Service and Privacy Policy, and to the sharing of your sample submission with the security community. Please do not submit files with personal information if you do not want them to be shared.

    When you see the results from the scan, follow the suggested actions. If the files of the highlighted process turn out to be malicious, end the process from the Processes tab and delete the harmful files and their folders from their file location.


    When you are sure that there are no more questionable processes in the Windows Task Manager, go to your desktop and press the Start Key and R key from the keyboard. This will open a Run window where you have to type the following command: appwiz.cpl 


    Click OK to run the command that you have typed and, in a second, you should see the Control Panel. Search for questionable entries that have been added there without your approval and uninstall them.

    After that, go to the Windows search field and type msconfig. Press the enter key from the keyboard and this will open the System Configuration app. From the tabs that are available, select the Startup tab, and take a careful look at the entries that are listed there.


    If you see entries that seem to be operated by Three Captcha, remove their checkmark. Also, google any entries with “Unknown” Manufacturer and if they look suspicious, remove their checkmark as well.


    *Source of claim SH can remove it.

    Even if browser hijackers like Three Captcha aren’t intended to harm your computer, it is always a good idea to check the system for any signs of hacking. This can be done in the Hosts file and here is how to open it:

    Hold together the Start and R keys from the keyboard and copy the following command in the Run box that pops up on the screen:

    notepad %windir%/system32/Drivers/etc/hosts

    Press Enter from the keyboard and the Hosts file will open. This is a simple text file that you can scroll. Go to the bottom of the file where it is written Localhost. In general, there shouldn’t be any questionable IP addresses below Localhost but if you see any, just as it is explained in the image below, this might be a sign that the computer is hacked.

    hosts_opt (1)

    If there are IP below “Localhost” that are bothering you and seem questionable, please write to us in the comments so we can assist you.

    Next, click on the start menu of the computer and search for Network Connections. Open it and right-click on the Network Adapter you are normally using. Then, from the menu that appears select  Properties. Once the Ethernet Properties window appears, select > Internet Protocol Version 4 (ICP/IP), and click on the Properties button as shown in image 2 below. After that, set the DNS  to Obtain DNS server automatically and then click on the Advanced button. Next, in the new window tap on the DNS tab and remove the rogue DNS in the field. Click OK to confirm the changes.



    Now, in this step, it is time to remove any traces that Three Captcha may have left in your browser. For your convenience, we will be showing the instructions for three of the most popular browsers.

    For Google Chrome, you need to right-click on the browser’s shortcut icon and select its Properties.


    When you get to Properties, tap on the Shortcut tab and remove everything that has been added after .exe in Target as it is shown in the image below. Then, click OK to save the changes.

    Browser Hijacker Removal Instructions

    ie9-10_512x512  Remove Three Captcha from Internet Explorer:

    In case that Internet Explorer is the browser that you are using, open it and click the gear icon IE GEAR. The main menu will pop-down where you have to select Manage Add-ons.

    pic 3

    In the Add-ons list, search for add-ons related to Three Captcha and Disable them. After that, go to the gear icon IE GEAR once again and select Internet Options. If the homepage URL has been replaced, change it to an address that you trust and click on  Apply.

    firefox-512 Remove Three Captcha from Firefox:

    In Mozilla Firefox, the instructions are similar. You have to just open Firefox and click on the three dashes icon mozilla menu . This will open the main menu where you have to select Add-ons. Once there, click on the Extensions tab on the left and remove any extensions that have been added by Three Captcha in the browser.

    pic 6

    chrome-logo-transparent-backgroundRemove Three Captcha from Chrome:

    Once you are done with the settings in the browser, close it and go to this directory:

     C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. Look for a folder called “Default”:

    Rename the Folder to Backup Default

    Select the Default folder and rename it to Backup Default. After that, restart Chrome.


    Browser hijackers like Three Captcha may add some entries in the Registry that need to be deleted if you want to fully remove the annoying program from the system. For that, open the Registry Editor (type Regedit in the windows search field and press Enter) and once you get there, open a Find box (press CTRL and F keyboard keys) where you can type the Name of the browser hijacker. Click on Find Next to search for entries with that name in the Registry and delete any results that are found with that name.

    If no entries are found in this way, go to the directories below and delete or uninstall them:

    • HKEY_CURRENT_USER-Software-Random Directory. 
    • HKEY_CURRENT_USER-Software-Microsoft-Windows-CurrentVersion-Run-Random
    • HKEY_CURRENT_USER-Software-Microsoft-Internet Explorer-Main-Random

    In case you complete the steps in this guide but Three Captcha still shows some signs of its presence in the system, please scan the computer with the recommended professional removal tool from this page.

    If you have any questions, feel free to share them with us in the comments section below this post. A member of our team will do his best to assist you. 


    About the author


    Brandon Skies

    Brandon is a researcher and content creator in the fields of cyber-security and virtual privacy. Years of experience enable him to provide readers with important information and adequate solutions for the latest software and malware problems.

    Leave a Comment

    We are here to help! Use SpyHunter to remove malware in under 15 minutes.

    Not Your OS? Download for Windows® and Mac®.

    * See Free Trial offer details and alternative Free offer here.

    ** SpyHunter Pro receives additional removal definitions and manual fixes through its HelpDesk in cases where they are needed.

    Spyware Helpdesk 1