What is THREECAPTCHA.TOP?
Investigation Target: THREECAPTCHA.TOP
Investigation Date: October 5, 2022
THREECAPTCHA.TOP is classified as a Fake Captcha Site
Browser pop-up ads using the notification spam!
THREECAPTCHA.TOP disguises itself as a service for checking visitor's humanity.
A well-known example is a Google Captcha service. The captcha helps to protect websites from denial of service attacks.
Here is an example of Google reCaptcha:
Fake captcha websites ask you to press "Allow" in a small popup window at the top of the page, with the text "Show Notifications."
Never click the "Allow" button!
If you already clicked it, you are infected. Your browser will receive notifications from the website and display the intrusive popups.
The close button on a notification will help only in seconds. After that, you will see a new popup window from the same website but with a different sub-domain.
This issue is known as "notification spam."
How to get rid of notification pop-up ads?
Solutions to solve the problem:
- Block browser notifications.
- Install uBlock Origin extension for your browser to remove ads and block adware websites:
uBlock Origin for Chrome, uBlock Origin for Firefox.
- Check your PC using Ultimate Malware Killer UnHackMe.
(Sorry for shameless advertising, but I know that it is 100% safe and working because my company created it)
- Also, I recommend using AdwCleaner, Hitman Pro, Emsisoft Anti-Malware.
How to remove THREECAPTCHA.TOP pop-up ads manually?Simple Guide for Google Chrome/New Edge, Opera, Yandex:
- Click the menu button.
- Click the Settings.
- Scroll the Settings or type "Notifications."
- Under "Privacy and security," click Site settings.
- Choose to block notifications:
Block all: Turn off Sites can ask to send notifications.
Block a site: scroll the list of Allowed websites, change Allow to Block. It is better to use the "Block" option instead of "Remove" because the Block will prevent repeating the infection.
- Allow quieter notification prompts: Allow sites to ask to send notifications, then click Use quieter messaging (blocks notification prompts from interrupting you).
How to remove THREECAPTCHA.TOP virus manually? (Virus removal guide)
- Uninstall all applications that you did not install and that you are not sure about.
- Disable the browser extensions.
- Disable Web Push Notifications in your browser.
- Reset your web browser settings.
- Use the Task Manager to close suspicious applications.
Open the Task Manager. Select the Details tab. Right-click on the columns header and choose "Select Columns."
Check the box near the "Command line." Right-click on the suspicious process and choose "End Task" in the popup menu.
- Use the Task Manager to disable unwanted startup programs.
Open the Task Manager. Select the Startup tab. Right-click on the program and choose "Disable" in the popup menu.
- Check the browser's shortcuts Target property.
Delete the web link added by the virus to the browser's command line.
Carefully inspect the command line. The virus can replace the path to the browser with the path to the virus browser.
- Use the Task Scheduler to delete the harmful scheduled tasks.
Search the task that contains the web link: THREECAPTCHA.TOP.
- Disable suspicious services using the Service Manager.
- Remove the registry keys or values include the string: THREECAPTCHA.TOP.
- Investigate the DNS properties of your network connection.
Set the IP addresses of your provider or well known public DNS servers.
How to remove THREECAPTCHA.TOP using UnHackMe?
STEP 1: Install UnHackMe (1 minute).
- Download UnHackMe from the official web site.
- Double click on UnHackMe.zip.
Unzip all files from the zip to a new folder.
- Double click on the unhackme_setup.exe.
- You will see a confirmation screen with a verified publisher: Greatis.
- Then you have to accept the license agreement.
- After that, choose a destination folder.
Complete UnHackMe installation.
STEP 2: Scan for THREECAPTCHA.TOP malware using UnHackMe (1 minute).
- The first scan will start automatically.
STEP 3: Remove THREECAPTCHA.TOP malware (3 minutes).
- Carefully inspect found items.
Malicious items are marked with a red shield.
Suspicious items are yellow.
UnHackMe automatically creates a System Restore point before fixing!
It is required to have the Windows System Restore active in case of deleting the important files to be able to recover them.
Next step: click the red button: Remove Checked!
- UnHackMe may ask for your confirmation to close all browsers.
Please do it!
- If you want to quarantine files before deleting, check the box Use file safe deleting.
- And after all, you will see the results of your scanning and fixing process:
STEP 4: (optional)
- Clear your browser cache, cookies, browsing history.
Chrome: Press CTRL+Shift+Del keyboard combination or open Settings, Privacy and security, Clear browsing data.
- Delete temporary files.
Open Start menu, type: disk cleanup, choose Disk Cleanup from the results.
Another way: press Win+R, type: cleanmgr, hit Enter.
- Clean the Recycle Bin.
- Remove 16RS0015EQ.SUDRT.RU virus (Removal Guide)
- Remove DISCOVERTODAY.CO virus (Removal Guide)
- Remove YOURDESKTOPDATAGUARD.SITE virus (Removal Guide)
- Remove ACTIVATOR-MICROSOFT.RU virus (Removal Guide)
- Remove DARNER.LIVE virus (Removal Guide)
- Remove FEEDFINDER.INFO virus (Removal Guide)
- Remove BULET.LIVE virus (Removal Guide)
- Remove BEFIR.LIVE virus (Removal Guide)
- Remove CHITACHOK.FUN virus (Removal Guide)
- Remove BESTNUWEST.LIVE virus (Removal Guide)