You Have A ZEUS Virus: what it is and how to remove it
You Have A ZEUS Virus is a fake security message which is used to convince users that they are dealing with a seriously dangerous trojan horse. This may appear once and you should exit the window but when you get these pop-ups constantly or click on them you can get a severe cyber infection.
Facts checked October 6, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
A scan of the PC is a quick way to confirm nothing was installed alongside the "Your Hard drive will be DELETED if your close this page." pop-up.
Do it yourself · free Remove You Have A ZEUS Virus yourself 2 steps, about 6 minutes, no software needed.
Start the steps
You Have A ZEUS Virus: summary
| Distribution | Deceptive websites, suspicious software, bundling, advertisements |
|---|---|
| Name | "You Have A ZEUS Virus" |
| Type | Scam |
| Related | Zeus virus |
| Tactics | Fake support scam |
| Possible danger | Can infect the device with real malware that causes severe damage |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 8 more facts
| Detection names | No Microsoft detection name is known |
|---|---|
| Damage | Not recorded in the old report |
| Symptoms | A fake virus warning in a browser tab and a support phone number shown on screen |
| Evidence | 5 write-ups by security sites; no sample analysed yet |
| Imitates | Microsoft support |
| Phone number | 844-859-0337 |
| First seen | 18 February 2019 |
| Facts checked | 6 October 2026 |
What the You Have A ZEUS Virus pop-up looks like
WARNING!
Your Hard drive will be DELETED if your close this page. You have a ZEUS Virus! Please call Support Now!. Call Toll-Free: 1-844-859-0337 To Stop This Process
Are you sure you want to leave this page?
Is the You Have A ZEUS Virus warning real?
- Phone number:
844-859-0337
From our report of Feb 2019 · not reviewed since
More from our earlier report on You Have A ZEUS Virus
- Clear the system from possible intruders using .
- Do not ignore this critical alert.
- Please call us within the next 5 minutes to prevent your computer from being disabled or from any information loss.
What the You Have A ZEUS Virus scammers want
From our report of Feb 2019 · not reviewed since
You Have A ZEUS Virus is a scam displayed as a fake alert that falsely indicates malware
You Have A ZEUS Virus is a fake security message which is used to convince users that they are dealing with a seriously dangerous trojan horse.
This may appear once and you should exit the window but when you get these pop-ups constantly or click on them you can get a severe cyber infection. If you are an experienced PC user, you will ignore this but note that Zeus virus became recently more active and getting this malware on the device can lead to serious damage.
If you received You Have A ZEUS Virus scam or similar alert, you should know that you are dealing with Tech support scammers . Make sure you do NOT dial 1-844-859-0337 or similar number because you will reach people seeking to swindle your money. Besides, they can install malware behind your back and steal your sensitive information.
Keep in mind that the appearance of You Have A ZEUS Virus scam has nothing in common with an infamous Zeus virus on your computer. This story was invented just to scare you.
The main threat you need to remove is a potentially unwanted program (typically, adware or browser hijacker) that hijacked your browser and changed its settings. As a result, it causes this alert every time you start your browsing on the web.
The very Zeus virus showed on the Web in 2012. Alternatively known as Gameover Zeus, it has been actively used to steal people's sensitive information, including banking data and passwords. However, the trojan horse was taken down in 2016 and today victims get affected by one of its impersonators.
Although, in the past year researchers reported about the recent activity of the trojan Zeus itself when it affected government institutions and companies. Nevertheless, when you get the message, an alert or even a voice warning on the computer that states about the infection it is most likely You Have A ZEUS Virus fake warning.
The main aim of the ZEUS virus scam is to swindle your money. The method used for that is very simple: after dialing this corrupted number, which is provided in the alert message, a victim is connected to scammers who will do their best to look like experienced Microsoft technicians.
All that they seek is to make the user fall for this scam and buy services that he or she doesn't need. Besides, sometimes such criminals try to infect victim's system with malware or similar viruses.
Fortunately, it is quite easy to identify the real scam by comparing it to the original Windows error or system notification. If the alter looks like the one below, you can start You Have A ZEUS Virus removal process without even thinking. The easiest way to do that is to use .


From our report of Feb 2019 · not reviewed since
Where does the success of this scam come from?
You have a Zeus virus scam has been so successful among PC users because it works as a manipulation tool.
First of all, it convinces the user that the most important information is at risk. Besides, it claims that the error was detected by Microsoft.
Therefore, even if you have no idea what the Zeus virus was, you might still fall for this fake alert and follow the requirements written in this fake BSOD screen. Typically, it claims:
Keep in mind that this scam has several versions. You can also notice such alerts on your web browser:
Due to the fact that You Have A ZEUS Virus developers have different tactics, you may also receive the following message:
According to victims, you can be required to pay up to 300 USD for the fake technical solution. Alternatively, the supposed technician might lead you through the tiresome steps which supposedly remove the threat. You can also be asked to tell a specific code to help the crook identify your location.
If you have been bothered by this scam, we highly recommend you to remove You Have A ZEUS Virus and potentially unwanted programs that could be related to it. Otherwise, you might get misguided to another fishy domain which might contain a real virus instead. If you see a similar message in the future, do not rush to follow the commands.
- Windows Detected ZEUS Virus
- Windows Defender Alert: Zeus Virus
- Security Update Error (Error code 0xB6201879)
- System Detected Zeus virus

From our report of Feb 2019 · not reviewed since
Tech support infiltration techniques
Surprisingly, the scam might have infiltrated the system at the time while you were going through the steps of the installation wizard.
As a result, overlooking the add-ons might have resulted in the infiltration of potentially unwanted software causing these fake alerts on your computer.
Keep in mind that programs which are distributed on trusted web pages might still contain fraudulent attachments. In that case, even if you install Skype or another application, watch out for various promoted search engines and suspicious programs. Unmark them and continue with the installation only when you are sure that no unwanted applications get installed.
How to get rid of the You Have A ZEUS Virus pop-up
The warning is a web page and your PC is not infected by it.
Close it, then remove what keeps bringing it back.
Step 1: Close the page without touching its buttons
The warning is a web page, not Windows, so closing the browser ends it. If the page blocks the browser or goes full screen, press Esc first, then end the browser in Task Manager (Ctrl + Shift + Esc). Start the browser again without restoring the session.
Warning: Do not call
844-859-0337and do not let anyone connect to the PC: the people behind it sell fake repairs.On Windows 11 and Windows 10 the steps are identical.
Full procedure with screenshots: Close a frozen app (Task Manager, Force Quit) On uGetFix
Step 2: Scan the PC, then run the offline scan
Open Windows Security > Virus & threat protection > Scan options, run a Full scan and remove everything it finds. Then select Microsoft Defender Antivirus (offline scan) and click Scan now: the PC restarts and scans before Windows loads, which finds files that hide while Windows runs.
Save your work first, because the offline scan takes about 15 minutes. Both scans are built into Windows 11 and Windows 10, and a second scanner from another vendor is a useful extra opinion.

Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Instructions for each browser and system
The detailed steps for every browser and system this guide covers. Open the one you use.
Uninstall from Windows
To eliminate You have a ZEUS scam, run thru all your programs and eliminate the suspicious ones.
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.

Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.

Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.

Remove from Google Chrome
To fix Chrome browser, you need to reset it. This procedure will also help you eliminate malicious browser add-ons.
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.

Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.

Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.

Remove from Microsoft Edge
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.

Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.

Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.

Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.

Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.

Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.

Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.

Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.

Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.

- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.

Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.

Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.

Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.

Delete from macOS
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).

Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.

- Finally, empty the Trash to permanently remove the leftovers.
Reset Internet Explorer
Remove dangerous add-ons:
- Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
- Pick Manage Add-ons.
- You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.

Change your homepage if it was altered:
- Open IE and click on the Gear icon.
- Select Internet Options.
- In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
- Click Apply and then select OK.

Delete temporary files:
- Press on the Gear icon and select Internet Options.
- Under Browsing history, click Delete...
- Select relevant fields and press Delete.

Reset Internet Explorer:
- Click on Gear icon > Internet options and select Advanced tab.
- Select Reset.
- In the new window, check Delete personal settings and select Reset.

Do not let government spy on you
The government has many issues in regards to tracking users' data and spying on citizens, so you should take this into consideration and learn more about shady information gathering practices.
Avoid any unwanted government tracking or spying by going totally anonymous on the internet.
You can choose a different location when you go online and access any material you want without particular content restrictions. You can easily enjoy internet connection without any risks of being hacked by using VPN.
Control the information that can be accessed by government any other unwanted party and surf online without being spied on. Even if you are not involved in illegal activities or trust your selection of services, platforms, be suspicious for your own security and take precautionary measures by using the VPN service.
Backup files for the later use, in case of the malware attack
Computer users can suffer from data losses due to cyber infections or their own faulty doings.
Ransomware can encrypt and hold files hostage, while unforeseen power cuts might cause a loss of important documents. If you have proper up-to-date backups, you can easily recover after such an incident and get back to work. It is also equally important to update backups on a regular basis so that the newest information remains intact - you can set this process to be performed automatically.
When you have the previous version of every important document or project you can avoid frustration and breakdowns. It comes in handy when malware strikes out of nowhere. Use for the data restoration process.
From our report of Feb 2019 · not reviewed since
"You Have A ZEUS Virus" scam elimination guide
Even it is not a complex virtual threat, we do not recommend opting for manual You Have A ZEUS Virus removal.
You should rely on a reliable anti-spyware to do the job for you and help you find all suspicious components that belong to this virus.
However, you can also select any of the trusted antivirus tools and let it remove You Have A ZEUS Virus. The very process does not last long; its duration depends on your hardware capabilities and additional intruders.
On the final note, if you ever encounter a similar scam, do not rush to make reckless actions, but closely look for hints which would reveal the true nature of the phenomenon.
Questions about You Have A ZEUS Virus
Should I trust a page that says "Your Hard drive will be DELETED if your close this page."?
No. Genuine security software reports problems in its own window or in the Windows notification area, never on a website you were redirected to. Pages that say "Your Hard drive will be DELETED if your close this page." are built to frighten you into calling a support number, buying a licence through a referral link or installing a so-called cleaner.
Do none of those. Close the tab and, if it opens again by itself, remove the sites allowed to send notifications and any extension you do not recognise. If you already called, paid or installed something, follow the matching section of this guide: each case needs a different next step, from calling your bank to removing a remote-access tool.
The warning said to call 844-859-0337. Should I?
Do not call. A genuine problem on your PC is reported by Windows Security or your own antivirus in its own window, without a phone number. A warning that tells you to call 844-859-0337 is a tech support scam, and the call is where the harm happens:
- remote access
- fake repairs
- card payments
- gift card requests
Close the warning instead. If it is in a browser tab, end the browser in Task Manager.
If it is in its own window, find the program in Installed apps and uninstall it. Then run a scan in Windows Security to be sure nothing else was added.
I clicked on the "Your Hard drive will be DELETED if your close this page." pop-up. Am I infected?
Clicking a button on the page usually only opens another page or starts a download. If nothing was downloaded and you did not run any file, the PC is very likely fine, and closing the tab is enough.
If a file was downloaded, delete it from the Downloads folder without opening it. If you opened it, treat the PC as infected: uninstall anything new in Installed apps and run a full scan.
If the page that showed "Your Hard drive will be DELETED if your close this page." also led you to type a password or card number, change that password from another device and call your bank. The sections after the removal steps cover each of these cases in order.
They called me back from 844-859-0337 offering a refund. Is it real?
No. The refund call is a second scam by the same people. They say they will return your money, ask you to log in to online banking while they are connected, then claim they sent too much and ask you to send the difference back, by transfer or gift cards.
In reality they moved your own money between your accounts or edited the page. Hang up on any call from 844-859-0337 or anyone who mentions your earlier repair.
If you want a refund, ask your bank or card issuer directly. If they had remote access, remove their tool and change your passwords from another device.
Is You Have A ZEUS Virus really from Microsoft support?
No. It is a web page made to look like a message from Microsoft support. Websites cannot scan your computer, see your files or know whether your antivirus is active. Real security warnings appear in Windows Security or in your antivirus program, not as browser pages with phone numbers, countdowns or prize wheels.
Close the page; nothing was installed just by seeing it. If you want to check, open Windows Security from the Start menu and run a quick scan. It shows the real status of your protection.
I called 844-859-0337. What should I do?
If you only talked, hang up and do not call back. The number 844-859-0337 belongs to the scammers behind You Have A ZEUS Virus, not to Microsoft support. If you let them connect to your PC, disconnect from the internet, uninstall the remote access program they used and run a full and offline scan.
Change passwords you typed during the call from a clean device. If you paid or gave bank details, call your bank at once. Report the number and expect refund calls later; they are part of the same scam.
How do I avoid pages like You Have A ZEUS Virus?
Keep the browser updated, do not click Allow on notification prompts from sites you do not know, and leave sites that open many pop-ups. Turn on Microsoft Defender SmartScreen in Edge under Settings > Privacy, search, and services, or Safe Browsing in Chrome under Settings > Privacy and security > Security.
Never call numbers, download files or paste commands because a web page told you to. An ad blocker from your browser's official extension store also cuts most redirect ads. Keep Potentially unwanted app blocking on in Windows Security as well.
Is my computer infected?
Seeing the page does not mean the PC is infected. You reached it through an ad, a redirect or a notification. Check whether something on the PC sends you there: if the page opens by itself or on every site, look for extensions and notification permissions, and run a scan.
If you downloaded or ran something the page offered, treat the PC as possibly infected and follow the plan. A full scan with Windows Security gives you a clear answer either way.
I let the support agent connect to my PC. What now?
Disconnect from the internet first. Then open Settings > Apps > Installed apps, sort by install date and uninstall any remote access tool they asked you to install, such as AnyDesk, TeamViewer or a similar program. Run a full scan and the Microsoft Defender offline scan.
From another device, change the passwords you typed while they were connected, and the e-mail password in any case. If they saw your bank or you paid, call the bank. Keep notes for the police report.
Will Fortect remove You Have A ZEUS Virus?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For You Have A ZEUS Virus, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- ZDNet: Now tech support scams are exploiting WannaCry ransomware fears (read October 6, 2026)
- 2-spyware news: Hackers' masterpiece – Zeus virus foisted among browser's search results (read October 6, 2026)
- FTC: How to spot, avoid and report tech support scams (read October 6, 2026)
- FTC: How to recognize, remove and avoid malware (read October 6, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 6, 2026)