We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Trojan:Win32/Captiya.A
Detected by Microsoft Defender Antivirus
Aliases: Win32/VMalum.BUZK (CA) Win32/Delf.APS (ESET) Trojan.Win32.Delf.aps (Kaspersky) W32/Delf.BJAJ (Norman) Trojan.Conycspa (Sunbelt Software)
Summary
Trojan:Win32/Captiya.A is a trojan that tries to decode CAPTCHA. CAPTCHA is an acronym for 'Completely Automated Public Turing test to tell Computers and Humans Apart', which is usually used for creating new e-mail accounts. Decoded CAPTCHAs can be used to automatically register e-mail accounts. The automatic mass creation of e-mail accounts can be used for spamming or other malicious activities.
Trojan:Win32/Captiya.A works in concert with Spammer:Win32/Newacc.A in order to automatically registers new e-mail accounts, and communicates with a Web Service in order to bypass CAPTCHA protection. Trojan:Win32/Captiya.A communicates to remote sites in order to aid and complete the registration of new accounts.
Manual removal is not recommended for this threat. To detect and remove this threat and other malicious software that may have been installed, run a full-system scan with an up-to-date antivirus product such as the Microsoft Safety Scanner (http://go.microsoft.com/fwlink/?LinkId=212742). For more information, see http://www.microsoft.com/protect/computer/viruses/vista.mspx.