Coding Captcha virus: what it is and how to remove it
If suddenly the browser you are using started behaving strangely, for example, your homepage or search engine has changed, chances are that you downloaded a browser hijacker. Coding Captcha virus is one of these nasty potentially unwanted programs, and you should not hesitate to remove it from your computer.
Facts checked October 6, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
A scan of the PC is a quick way to confirm nothing was installed alongside the "Coding Captcha virus" pop-up.
Do it yourself · free Remove Coding Captcha virus yourself 4 steps, about 12 minutes, no software needed.
Start the steps
Coding Captcha virus: summary
| Distribution | Deceptive ads, software bundle packages, fake update prompts |
|---|---|
| Damage | Installation of other potentially unwanted programs, privacy issues |
| Name | Coding Captcha virus |
| Type | Browser hijacker |
| Symptoms | Homepage and new tab address altered; a customized search engine is appended to the homepage; altered search provider and search results, etc. |
| Detection names | No Microsoft detection name is known |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 3 more facts
| Evidence | 4 write-ups by security sites; details still limited |
|---|---|
| First seen | 3 August 2021 |
| Facts checked | 6 October 2026 |
Is the Coding Captcha virus check real?
From our report of Aug 2021 · not reviewed since
- Computer infections can cause significant damage to system files or disrupt normal settings.
- To revert these changes and remediate the OS, perform a full system scan with repair
What the Coding Captcha virus scammers want
From our report of Aug 2021 · not reviewed since
Coding Captcha virus hijacks your browsers in order to show altered search results
If suddenly the browser you are using started behaving strangely, for example, your homepage or search engine has changed, chances are that you downloaded a browser hijacker.
Coding Captcha virus is one of these nasty potentially unwanted programs, and you should not hesitate to remove it from your computer.
The browser hijacker can interfere with normal computer use. As soon as this program successfully enters the system, it changes the browser settings. It can access all browsers (Chrome, Internet Explorer, Firefox, etc.) and may change the default homepage or search engine, install a new add-on or toolbar on the browser or even redirect to various unfamiliar websites every time the victim tries to search for something on the internet.
Worst of all, that doesn't end there. This annoying piece of software is capable of displaying a variety of pop-up ads, banners, and other promotional content on your screen. These advertisements can be difficult to remove and may slow down your browser.
Usually, websites that appear in ads or to which the user is redirected are targeted by hackers. They often place their viruses there. As a result, if you start clicking on these links, you might get a full bouquet of viruses. And then you will have to eliminate not one but several problems.
In addition, potentially unwanted programs often like to track browsing-related user information. The data collected by such programs may include IP addresses, search results, etc.
Of course, browser hijackers are not as dangerous as trojans, ransomware, or other serious viruses but they are still quite annoying and may cause privacy issues or the installation of other PUP. So, if you want to get rid of unwanted ads and redirects and avoid tracking, you should remove Coding Captcha virus from your system as soon as possible.
If you are still wondering how this browser hijacker entered your computer, the answer is quite simple. Such software uses stealthy methods:
- deceptive advertisements
- fake updates
- so on
But in most cases, potentially unwanted programs use the bundling method to spread successfully.
This means that when you downloaded an application from an untrusted source or tried to download freeware, you have also installed a potentially unwanted application. To avoid this, you should always use the Advanced installation method. Then just uncheck the unwanted add-ons and you won't have any problems with them.
Of course, we do not recommend downloading anything from unreliable web pages at all. By installing strange applications, various games cracks, etc., you always run the risk of infecting the computer with potentially unwanted programs or even much more serious cyber threats.
What to do if you ran the Coding Captcha virus command
Whether you ran the command decides everything else, so the first step checks that.
Step 1: Check whether the pasted command ran
The fake check asked you to press Windows + R, paste and press Enter. Open the same box and look at its drop-down history: a
powershell,mshtaor curl line you did not type yourself is the command Coding Captcha virus gave.Once run, it fetches malware within seconds, so take the PC offline and follow all the remaining steps. If the history is empty or harmless, nothing was started on the Windows 11 or Windows 10 PC.
Full procedure with screenshots: Run a Microsoft Defender Offline scan
Step 2: Scan the PC, then run the offline scan
A scan finds the parts of Coding Captcha virus that the manual steps cannot see. In Windows Security > Virus & threat protection > Scan options, start a Full scan and quarantine what it reports.
Follow it with Microsoft Defender Antivirus (offline scan) > Scan now, which restarts the PC and checks the disk while Windows and the malware are not running.
It takes about 15 minutes and works the same in Windows 11 and Windows 10. If either scan finds something, run the full scan again after removal until it comes back clean.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Step 3: Change passwords from another device and sign out other sessions
Coding Captcha virus can copy saved passwords, cookies and session tokens and send them out in seconds, so cleaning the PC does not undo the theft.
Change your passwords on a device that was never infected, starting with the e-mail account, since every other reset goes through it. On each account, end all other sessions and check the recovery e-mail, phone number and forwarding rules.
Then turn on two-step verification. Sign in on the Windows 11 or Windows 10 PC again only after the offline scan is clean.
Full procedure with screenshots: Turn on two-step verification / secure a hacked account
Step 4: Delete scheduled tasks that bring it back
Programs like Coding Captcha virus add a scheduled task so they return after an uninstall or reopen a page at every sign-in. Start Task Scheduler, open Task Scheduler Library and sort by Last Run Time to see what ran recently.
On the Actions tab, a program in a user folder, a script or a web address is a warning sign; right-click such a task and choose Delete.
Tasks with names copying Google, Edge or Windows updaters but pointing to an odd folder are typical. The tool looks the same in Windows 11 and Windows 10.
Windows 11: Task Scheduler Library, the task selected, the Actions tab shows the file it runs. Full procedure with screenshots: Remove what malware leaves behind in Windows
Instructions for each browser and system
The detailed steps for every browser and system this guide covers. Open the one you use.
Remove from Microsoft Edge
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.
Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.
Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.
Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.
Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.
Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.
Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.
Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.
Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.
- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.
Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.
Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.
Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.
Access your website securely from any location
When you work on the domain, site, blog, or different project that requires constant management, content creation, or coding, you may need to connect to the server and content management service more often. The best solution for creating a tighter network could be a dedicated/fixed IP address.
If you make your IP address static and set to your device, you can connect to the CMS from any location and do not create any additional issues for the server or network manager that needs to monitor connections and activities. VPN software providers like can help you with such settings and offer the option to control the online reputation and manage projects easily from any part of the world.
Recover files after data-affecting malware attacks
While much of the data can be accidentally deleted due to various reasons, malware is one of the main culprits that can cause loss of pictures, documents, videos, and other important files.
More serious malware infections lead to significant data loss when your documents, system files, and images get encrypted. In particular, ransomware is is a type of malware that focuses on such functions, so your files become useless without an ability to access them.
Even though there is little to no possibility to recover after file-locking threats, some applications have features for data recovery in the system. In some cases, can also help to recover at least some portion of your data after data-locking virus infection or general cyber infection.
From our report of Aug 2021 · not reviewed since
How to get rid of the potentially unwanted program
But if the virus is already on your computer, then all that remains is to get rid of it.
The easiest way to remove Coding Captcha virus is by performing a scan with security software, such as . It is a perfect tool to deal with other, more serious security problems as well. If you update the software often and scan the system once or twice a week, you can be sure that your computer will be protected from ransomware, trojans, and other more severe cyber threats.
Of course, if you don't want to rely on a powerful antivirus program, manual elimination is also possible, but it will take longer. Here are instructions for Google Chrome:
If you still experiencing ads or annoying redirects. But the manual method is also possible:
After that, you should change the homepage to previous one:
If these methods did not help you, try to reset Google Chrome to eliminate all the unwanted components. Sometimes this is the only way that can help get rid of the unwanted changes on your browser as pieces of the browser hijacker may be hidden. To reset the Chrome browser you should follow these steps:
We hope that our explanations have helped you to get rid of the potentially unwanted program. If you are using another browser, then you will find instructions on how to delete the browser hijacker below.
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all the suspicious plugins that might be related to the unwanted program by clicking Remove.
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.
- Click the menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
- Click on Menu and select Settings.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.
Questions about Coding Captcha virus
Did the "Coding Captcha virus" pop-up really find a virus?
It did not find anything, because a web page has no way to look at your files. The scan animation, the number of threats and the warning "Coding Captcha virus" are part of the page and are the same for everyone who lands on it.
What the pop-up does tell you is that your browser was sent to a scam page, either through an ad, a redirect or a notification permission. That source is worth removing.
For a real answer about infections, run a scan in Windows Security or another antivirus you installed yourself, not one offered by the page. If the real scan finds nothing and the page stops after you clean up notifications and extensions, you are done.
I clicked on the "Coding Captcha virus" pop-up. Am I infected?
Clicking a button on the page usually only opens another page or starts a download. If nothing was downloaded and you did not run any file, the PC is very likely fine, and closing the tab is enough.
If a file was downloaded, delete it from the Downloads folder without opening it. If you opened it, treat the PC as infected: uninstall anything new in Installed apps and run a full scan.
If the page that showed "Coding Captcha virus" also led you to type a password or card number, change that password from another device and call your bank. The sections after the removal steps cover each of these cases in order.
Why do I keep seeing Coding Captcha virus?
Because something keeps sending your browser to it. The usual causes are a site allowed to show notifications, an extension that injects pages, or ads on sites you visit often. The sign reported, A browser warning that reads "Coding Captcha virus", appears whenever one of these triggers fires.
Remove unknown sites from the browser's notification list, delete extensions you did not install on purpose, and see whether the page returns. If it only appears on one particular site, that site's ads are the source and avoiding it or using the browser's built-in protection settings is the fix.
Why is pasting a command so dangerous?
Because it skips every protection that would stop a normal download. Browsers check files you download and SmartScreen checks programs you open, but a command you type yourself is trusted as your own action. Pages like Coding Captcha virus exploit exactly this.
The command fetches and runs code in memory, often leaving little on the disk for a quick scan to find. That is why the advice is absolute: no website has a legitimate reason to make you paste anything into Run, Terminal or PowerShell.
Is my phone affected by Coding Captcha virus?
Not through the PC. A scam page in a Windows browser cannot reach a phone, even if both use the same account. The sign reported, A browser warning that reads "Coding Captcha virus", happened in a browser on the PC.
Phones can meet similar pages on their own, usually through ads or notifications, and the fix there is the same idea: remove notification permissions and unknown apps. If you used the phone to call a number shown on the page, follow the steps for callers in this guide.
Can Coding Captcha virus harm my PC just by being open?
No. A web page runs inside the browser's sandbox and cannot install programs, read your files or change Windows settings on its own. Coding Captcha virus can only make noise, fill the screen and try to persuade you. The risk begins when you follow it:
- calling the number
- paying
- downloading a file
- pasting a command
Close the page, and if it frightened you into doing one of those, follow the matching steps in this guide. Otherwise, nothing on the PC needs cleaning or repairing.
I closed it, but it appeared again the next day. Why?
A page that returns on its own has a trigger. Look at how it appeared: from a pop-up in the corner of the screen means a notification permission; on start-up means a session restore or a changed start page; while browsing any site means an extension; on one particular site means that site's ads.
Each has a quick fix in the browser settings. If none of them explains it, reset the browser, which clears permissions, extensions and start pages together.
The page will not close. What can I do?
Press Esc to leave full-screen mode, then close the tab. If the browser is frozen, open Task Manager with Ctrl + Shift + Esc, select the browser and click End task. When you restart the browser, do not restore tabs.
If the page loads again on start, open a new window and close the old one, then remove the page from the browser's startup settings. Restarting the PC also works. Nothing was installed by the page, so closing it by force is safe and loses nothing.
Which browser settings protect against fake alerts?
Three matter most. First, notifications: set your browser to ask before allowing them, and block sites you do not trust. Second, reputation checks: SmartScreen in Edge and Safe Browsing in Chrome warn you before known scam pages load, and Firefox has its own deceptive-content protection under Privacy & Security.
Third, pop-ups and redirects: keep the default blocking on. Add a reputable ad blocker if fake alerts keep reaching you through ads on sites you use. Review the notification list every few months.
Will Fortect remove Coding Captcha virus?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For Coding Captcha virus, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- Comparitech: Browser hijacking: What is it and how do you prevent and remove it (read October 6, 2026)
- FTC: How to spot, avoid and report tech support scams (read October 6, 2026)
- FTC: How to recognize, remove and avoid malware (read October 6, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 6, 2026)
- Microsoft Learn: How Microsoft names malware (read October 6, 2026)