I think more than captcha, i think spammers lack the number of unique IP address they can use to create account. I am curious, if they would clear out if the Trojan communicated with some other server than the yahoo.