Severity scale:  

“Windows Defender Alert: Zeus Virus” Tech Support Scam. How to remove? (Uninstall guide)

removal by Gabriel E. Hall - - | Type: Malware

“Windows Defender Alert: Zeus Virus” pop-up is a scam – do not call the provided number

“Windows Defender Alert: Zeus Virus” virus is a malicious computer program that causes redirects to phishing websites[1] and tries to scare the victim by displaying fake security warnings[2]. The website that displays such warning usually has a blue background with some white text on it, plays an audio message, and freezes the browser.

The website contains Windows logos to convince the victim that the message comes from a legitimate source. The site then shows a pop-up that says:

Windows Defender Alert: Zeus Virus Detected In Your Computer!!! Please Do Not Shut Down or Reset Your Computer.

This message is deceptive, and users should not believe what it says – there is likely no Zeus virus on the system. Windows Defender would never open alerts via user’s web browser in such an intrusive way and would never suggest calling technicians via phone.

Such scam pages typically threaten that if the victim won’t call the number (in this case, +1-844-313-7003), the imaginary attackers would steal victim’s passwords, browser history, credit card information and local hard disk files.

Such statements simply are used to convey the sense of urgency so that the victim would call the scammers right away. If you noticed such messages on your screen, you could remove Windows Defender Alert: Zeus Virus” Tech support scam using anti-malware software – Reimage.

Scammers that wait for victims to call them are ready to tell all kinds of lies. Windows Defender Alert: Zeus Virus” Tech support scammers are on a prey for easy targets – if the victim gets convinced to call the scammers, it is likely that they will follow their commands, too. Do not fall for such scam! These fraudsters are willing to swindle money from users by any means, and they usually tell the victim to perform series of useless tasks.

First of all, they ask what the user sees on the computer screen.This way, they understand what kind of tech support scam program the victim was infected with; following that, they tell the victim to go to particular computer folders, press keyboard keys and do other things just to confuse the victim even more.

Finally, they announce the problem and urge the victim to buy an overpriced security software pack or, even worse, they suggest “helping” the user remotely.

If the victim provides access to the computer system remotely, scammers can plant ransomware or another dangerous program on the system in seconds. To avoid contact with scammers and to keep your computer safe, users should perform “Windows Defender Alert: Zeus Virus” removal without a wait.

Malware related to Zeus virus

“You Have A ZEUS Virus” Tech support scam. This malicious software displays intrusive pop-ups claiming that victim's computer is infected with Zeus virus. Also, the virus claims that user's hard drive will be deleted in case no action is taken regarding the issue.

The malicious program usually displays alerts via victim's web browser and slows down the computer to create an impression that the computer has been severely infected.

It is recommended to remove “You Have A ZEUS Virus” virus immediately as soon as the deceptive messages start to appear on the screen. Keep in mind that fraudsters display the same alert to every victim and that error codes provided in them are made up and mean nothing.

Zeus Trojan. This virus is one of the most prevalent data-stealing malware samples that manages to operate silently. It is also known as Zbot Trojan. Once installed, it obfuscates itself in the system to avoid detection. This way, it can operate unnoticeably for weeks, months or years (if the victim doesn't use a proper security software to identify threats).

Zeus Trojan always keeps a connection with its Command & Control center and can receive commands from it. As a consequence, it can drop malicious files or programs on the compromised computer, delete information, and carry out other illegal tasks.

It must be noted that the real Zeus Trojan operates as silently and sneakily as possible because the more time it remains on the computer system, the more valuable details it can gather for cyber criminals.

Zeus virus. The majority of people tend to address this spying Trojan as a “virus.” While the real version of it operates the same way as previously described Zeus Trojan, the phrase “Zeus virus” has been actively used by tech support scammers.

Usually, fraudsters create a malicious program that assigns itself to startup programs and launches whenever the user turns on the computer. It starts displaying annoying alerts immediately as the system boots. In some cases, the malicious software even prevents the system from starting and displays a lock screen instead of Windows login screen.

No matter whether the victim blocks access to the system or displays pop-ups via a web browser, it will provide a number to call “tech support” in order to resolve the “issue.” Scammers behind these operations seek to swindle money from unsuspecting victims by offering them to buy useless software for the high price. They can also ask for victim's credit card details in order to “confirm” victim's identity, which is obviously a scam.

Keep in mind that criminals can also ask you to provide remote access to your computer for them so that they could “fix” your computer. You should never allow them to do it as they can plant actual malware on your computer system.

Deceptive programs are distributed using variety of methods

NoVirus experts[3] report that tech support scams distribute malware using software bundling, malicious spam, and possibly other techniques. Luckily, victims can prevent installing such malicious programs rather easily. Usually, all that the user needs to do is to avoid opening shady email attachments and installing freshly downloaded software the right way.

Wondering what is the right way to install computer programs? Let us clear this out for you. Sadly, many people believe that it is enough to hit the “Next” button several times and then click “Finish” to complete the process. Sadly, such way of installation is likely to grant several potentially unwanted programs a permission to enter the computer system unnoticed

For this reason, we always recommend reading Privacy Policy and Terms of Use documents and adjusting the installation settings the right way. To do that, select Custom or Advanced settings instead of Default or Standard ones. All that is left to do is to deselect unwanted apps and extensions suggested to you.

Remove “Windows Defender Alert: Zeus Virus” virus

If the described pop-ups emerge on your screen on a daily basis, do not delay “Windows Defender Alert: Zeus Virus” tech support scam removal. To eliminate the virus, choose a decent anti-malware program like Reimage.

Try to close the browser that keeps showing these annoying pop-ups to you, and if you can’t do so, follow the guide given below to reboot your PC into Safe Mode with Networking. Once you do that, run a system scan with anti-malware software to remove “Windows Defender Alert: Zeus Virus” scam virus remains for good.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove “Windows Defender Alert: Zeus Virus” Tech Support Scam you agree to our privacy policy and agreement of use.
do it now!
Reimage (remover) Happiness
Reimage (remover) Happiness
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall “Windows Defender Alert: Zeus Virus” Tech Support Scam. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.

Manual “Windows Defender Alert: Zeus Virus” Tech Support Scam Removal Guide:

Remove “Windows Defender Alert: Zeus Virus” Tech Support Scam using Safe Mode with Networking

Reimage is a tool to detect malware.
You need to purchase Full version to remove infections.
More information about Reimage.

The virus tends to freeze the computer so that the victim could not close the browser window. For this reason, you will need to reboot your PC into Safe Mode with Networking to deactivate the virus and allow an anti-spyware software to remove it.

  • Step 1: Reboot your computer to Safe Mode with Networking

    Windows 7 / Vista / XP
    1. Click Start Shutdown Restart OK.
    2. When your computer becomes active, start pressing F8 multiple times until you see the Advanced Boot Options window.
    3. Select Safe Mode with Networking from the list Select 'Safe Mode with Networking'

    Windows 10 / Windows 8
    1. Press the Power button at the Windows login screen. Now press and hold Shift, which is on your keyboard, and click Restart..
    2. Now select Troubleshoot Advanced options Startup Settings and finally press Restart.
    3. Once your computer becomes active, select Enable Safe Mode with Networking in Startup Settings window. Select 'Enable Safe Mode with Networking'
  • Step 2: Remove “Windows Defender Alert: Zeus Virus” Tech Support Scam

    Log in to your infected account and start the browser. Download Reimage or other legitimate anti-spyware program. Update it before a full system scan and remove malicious files that belong to your ransomware and complete “Windows Defender Alert: Zeus Virus” Tech Support Scam removal.

If your ransomware is blocking Safe Mode with Networking, try further method.

Finally, you should always think about the protection of crypto-ransomwares. In order to protect your computer from “Windows Defender Alert: Zeus Virus” Tech Support Scam and other ransomwares, use a reputable anti-spyware, such as Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Malwarebytes Anti Malware

About the author

Gabriel E. Hall
Gabriel E. Hall - Passionate web researcher

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Gabriel E. Hall
About the company Esolutions


Removal guides in other languages