Trojan.Captchar.A

Trojan.Captchar.A has the capability to gather CAPTCHA data by recording keystrokes on the compromised Windows system. If Trojan.Captchar.A is executed, it will inject a code on a hidden existence of IEXPLORE.EXE. This Trojan will also displays the following message:

Hi!
My name is melissa. I’m 18 years old and you have come to the
right place to play :)
How to play?

Easy, enter the code that you will see and I’m taking off
1 of my things. :) Want to start strip me? Then what are you
waiting for? Click the start play.

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Windows Vista

Technical Details and Additional Information:

What can Trojan.Captchar.A do to infected system?
- It will entice users to enter a CAPTCHA information of fake box.
- The Trojan will record users input and send to a remote server.
- Gathered information will be used for illegal operation.

Trojan.Captchar.A – Removal

Removing Trojan.Captchar.A Manually:
1. If using Windows ME or XP, System Restore must be disabled to prevent the threat from restoring itself. [Windows XP System Restore]
2. Update the virus definitions.
3. Reboot Windows in SafeMode [how to]
4. Run a full system scan and clean/delete all infected file(s)
5. Delete/Modify any values added to the registry. [how to edit registry]
6. Exit registry editor and restart Windows.

Anti-virus Tools

Online Virus Scanner:
Online virus scanner can provide scan and clean functions just like any anti-virus software without the need to install additional AV product. Perform a thorough scan with free Online Virus Scanner that can be found here or on web sites of legitimate security software provider.

Scan with Norton Power Eraser:
Norton Power Eraser is a virus removal tool created by Norton Antivirus to remove unfamiliar threats without using the traditional AV signatures. Download the tool from this location and start scanning the computer for viruses.

What to do next...