Severity scale:  
  (55/100)

Zeus Virus Detected. How to remove? (Uninstall guide)

removal by Ugnius Kiguolis - - | Type: Malware

Zeus Virus Detected is a fake Microsoft warning distributed by scammers

Zeus Virus Detected scam

Zeus Virus Detected is a fake warning message that people can witness while browsing the Internet. It can show up on both, Mac and Windows OS and may even lock down the Google Chrome, Mozilla Firefox, Microsoft Edge, Safari or any other targeted web browser. Despite the fact that Zeus virus is a real cyber infection that had been considered as one of the most dangerous viruses from 2007 until 2011,[1] the alert has nothing in common with a genuine virus and belongs to tech support scam category.

 Name  Zeus Virus Detected
 Classification Malware
Category  Technical Support Scam[2]
 Symptoms Web browser redirects to fake websites urging people to call for support due to malicious virus infection. Browser can also freeze, crash, and generate excessive amount of commercial ads. 
 Main dangers Microsoft Technical Support Scam alerts are not dangerous. They do not have destructive effect on the system. However, the danger level increases if the PCs owner falls for calling the given number. In this case, the risk of money loss or identity theft is high. 
 Versions

“Windows Detected ZEUS Virus”
“Windows Defender Alert: Zeus Virus”
“You Have A ZEUS Virus”
“Windows Defender Alert: Zeus Virus”
“Your System Has Detected Zeus Virus”
“Zeus Virus Detected – Your Computer Has Been Blocked”

 Distribution Scam alerts are caused by adware-type programs that spread bundled with freeware
 Elimination process Download Reimage and run a full system scan with it. It will eliminate scam-related malware and other unwanted programs. After malware elimination, reset your web browser's settings. 

The name of this infection is actively misused by scammers who seek to make their Tech-Support-Scam alerts look as convincing as possible. The fake Zeus Virus alert typically renders the design of Microsoft’s official notifications[3] and impersonates “Certified Microsoft technicians.” Mobile numbers included in the alert are yet another trait that allows recognizing a scam. At the moment, security experts report about these fake Microsoft tech support numbers:

  • +1-844-313-7003
  • +1-866-625-5558
  • +1 (888) 944-5714
  • +1-877-224-2995
  • +1-844-557-540
  • 1-844-859-0337
  • 1-844-324-6233
  • 1-844-680-1071
  • 1-800-363-782
  • 1-877-624-3165
  • 1-844-612-7496
  • (866) 249-2994
  • (888) 202-7560
  • (855) 247-2419
  • (888)-252-1520
  • 0800-014-8826
  • 44-800-090-3820

Since this type of scam is being actively distributed on the Internet, people have to be cautious and remember the fact that Zeus is not active since 2012 and there's no chance of getting infected with it. The pop-up is only a strategy used by criminals to make the content of fake alerts more convincing and threatening. 

Zeus Virus Detected pop-up alert

The modus operandi of the scam

There are many versions of the related scams, but all of them share similar circumstances of the occurrence, design, content, behavior, and intentions. Typically, this specific tech support scam strikes PC users who fail to update OS, web browser, and security programs. It is closely related to adware-type programs that are infected with malicious JavaScrip[4] code. If the potential victim falls for installing scam-infected adware, his or hers web browser experiences unauthorized modifications needed to initiate regular system’s redirects to compromised web domains.

In some of the cases, adware is not necessary to encounter the scam. It may be disguised under illegal movie streaming websites, gambling sites or domains that contain pornography. Currently, these are domains that generate the fake Zeus Virus Detected alert:

  • Crash-h3a23z.info
  • Certifiedinternettroubleshooting.com
  • Microsoft-high-risk-alert.com
  • Rajasthantent.com
  • 54.71.45.30
  • Defaultprogramssystem.com
  • Support.windows.com
  • Streetsecurity.xyz, etc.

In most of the cases, the web browser stumbles upon the alert after multiple redirects. It tends to show up in layers. First of all, a blue, black or red screen containing technical information is being displayed. In less than 10 seconds, a pop-up alert emerges and freezes web browser. That’s one of the strategies used by criminals to scare people into thinking that their PCs are severely infected.

The content of the Zeus virus detected alert is very similar, though can differ a little bit each time. As a rule, fake alerts contain the following details:

  • A slogan reporting Zeus infection;
  • An error code, which may be invented or randomly taken from the Windows error database (#365838d7f8a4fa5, 0XB1983959, # 0x80072ee7[5] );
  • A supposedly unique victim’s identification number (WBCKL457, B2957E, G3468D);
  • A list of data that is supposedly targeted by criminals (passwords, credit card details, hard disk files, etc.)
  • “Toll-Free” mobile number of “Certified” Microsoft or Apple technicians (+1-844-313-7003, (866) 249-2994, (888) 202-7560).

The main goal of Zeus virus detected scams

Unlike the virus itself, Zeus-themed scams are not that dangerous. Fake pop-ups flooding web browser’s screen are triggered by the adware-type program, which does not have a destructive effect on the system. The goal of the scam is to make people dial the given number.

At best, the number provided may be the premium rate, meaning that a one minute of conversation can cost you $2.99 or more. However, usually, scammers have much bigger and much worse intentions.  They can professionally impersonate Microsoft technicians to prove credibility and then extort personal information from gullible people. More often than not, impostors seek to extort information needed for remote connection to victim’s PC.

Zeus Virus Detected Tech-Support-Scam

Therefore, to prevent yourself from being scammed, scan your PC with Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Malwarebytes Anti Malware as soon as your web browser starts generating fake alert messages reporting a non-existent virus infection. No matter which version of this scam you encounter, remove Zeus Virus Detected from Chrome or another web browser without delay.

Scammers rely on bundling to distribute scam alerts

People risk encountering technical support scam alerts when visiting illegal websites, such as gambling, adult dating or pornographic websites. Such domains are usually filled with infected ads and malicious links. 

Nevertheless, scam alerts typically show up right after the installation of freeware. Free applications are frequently supplemented with adware-type and other potentially unwanted programs (PUPs). Usually, they are promoted as useful browser add-ons, toolbars, extensions or plug-ins. People who opt for Quick or Recommended freeware installation setup agree with the installation of the whole bundle by default. 

Consequently, if one of the adware injected in freeware was infected with a JavaScript code, web browser's settings get compromised in a way to generate fake Microsoft support notifications. NoVirus.uk[6] cybersecurity experts recommend people to opt for Advanced or Custom installation freeware and verify each installation step to prevent unwanted apps from installing. 

A guide on how to remove Zeus Virus Detected scam

One of the options to initiate Zeus Virus Detected removal is to perform a full system scan with a professional anti-virus program. That's the only trustworthy way to eliminate the whole malware bundle. Our recommended programs are Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus, and Malwarebytes Anti Malware, but you can opt for another reputable anti-virus of your preferences. 

It's possible to remove Zeus Virus Detected alert manually as well. This procedure encompasses several stages. First of all, you have to eliminate PUPs from the system using in-built uninstallers. Then, check the system for related Registry entries, and other associated components. Finally, open a new session of the affected web browser (NOTE: do not restore the last browsing session) and reset its settings. You can find a step-by-step tutorial down below:

You can remove Zeus Virus Detected automatically with a help of one of these programs: Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus, Malwarebytes Anti Malware. We recommend these applications because they can easily delete potentially unwanted programs and viruses with all their files and registry entries that are related to them.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Zeus Virus Detected you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Zeus Virus Detected. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.
More information about this program can be found in Reimage review.
Press mentions on Reimage

To remove Zeus Virus Detected, follow these steps:

WindowsMac OS XInternet ExplorerMicrosoft EdgeFirefoxGoogle ChromeSafari

Delete Zeus Virus Detected from Windows systems

Zeus Virus Detected scam elimination process on Windows requires performing the steps provided below. Initiate each step in right order.

  1. Click Start Control Panel Programs and Features (if you are Windows XP user, click on Add/Remove Programs). Click 'Start -> Control Panel -> Programs and Features' (if you are 'Windows XP' user, click on 'Add/Remove Programs').
  2. If you are Windows 10 / Windows 8 user, then right-click in the lower left corner of the screen. Once Quick Access Menu shows up, select Control Panel and Uninstall a Program. If you are 'Windows 10 / Windows 8' user, then right-click in the lower left corner of the screen. Once 'Quick Access Menu' shows up, select 'Control Panel' and 'Uninstall a Program'.
  3. Uninstall Zeus Virus Detected and related programs
    Here, look for Zeus Virus Detected or any other recently installed suspicious programs.
  4. Uninstall them and click OK to save these changes. Right click on each of suspicious entries and select 'Uninstall'
WindowsMac OS XInternet ExplorerMicrosoft EdgeFirefoxGoogle ChromeSafari

Uninstall Zeus Virus Detected from Mac OS X system

Fake warnings can strike Mac OS users as well. Although these cases are less common, many people search for help on how to get rid of scam pop-ups once and for all. The following instructions will help you:

  1. If you are using OS X, click Go button at the top left of the screen and select Applications. Cick 'Go' and select 'Applications'
  2. Wait until you see Applications folder and look for Zeus Virus Detected or any other suspicious programs on it. Now right click on every of such entries and select Move to Trash. Click on every malicious entry and select 'Move to Trash'
WindowsMac OS XInternet ExplorerMicrosoft EdgeFirefoxGoogle ChromeSafari

Remove Zeus Virus Detected from Internet Explorer (IE)

Malware removal is not sufficient to disable malicious extensions from Internet Explorer. For this purpose, you should reset its settings to default.

  1. Remove dangerous add-ons
    Open Internet Explorer, click on the Gear icon (IE menu) on the top right corner of the browser and choose Manage Add-ons. Click on menu icon and select 'Manage add-ons'
  2. You will see a Manage Add-ons window. Here, look for Zeus Virus Detected and other suspicious plugins. Disable these entries by clicking Disable: Right click on each of malicious entries and select 'Disable'
  3. Change your homepage if it was altered by virus:
    Click on the gear icon (menu) on the top right corner of the browser and select Internet Options. Stay in General tab.
  4. Here, remove malicious URL and enter preferable domain name. Click Apply to save changes. Delete malicious URL, enter your desired domain name and click 'Apply' to save changes
  5. Reset Internet Explorer
    Click on the gear icon (menu) again and select Internet options. Go to Advanced tab.
  6. Here, select Reset.
  7. When in the new window, check Delete personal settings and select Reset again to complete Zeus Virus Detected removal. Go to 'Advanced' tab and click on 'Reset' button. Now select 'Delete personal settings' and click on 'Reset' button again
WindowsMac OS XInternet ExplorerMicrosoft EdgeFirefoxGoogle ChromeSafari

Erase Zeus Virus Detected from Microsoft Edge

Just like IE users, people affected by fake Microsoft tech-support scam on Edge should follow the tutorial on how to restore its settings before the attack.

Reset Microsoft Edge settings (Method 1):

  1. Launch Microsoft Edge app and click More (three dots at the top right corner of the screen).
  2. Click Settings to open more options.
  3. Once Settings window shows up, click Choose what to clear button under Clear browsing data option. Go to Settings and select 'Choose what to clear'
  4. Here, select all what you want to remove and click Clear. Select 'Clear' button
  5. Now you should right-click on the Start button (Windows logo). Here, select Task Manager. Open the start menu and select 'Task Manager'
  6. When in Processes tab, search for Microsoft Edge.
  7. Right-click on it and choose Go to details option. If can’t see Go to details option, click More details and repeat previous steps. Right-click 'Microsoft Edge' and select 'Go to details' Select 'More details' if 'Go to details' option fails to show up
  8. When Details tab shows up, find every entry with Microsoft Edge name in it. Right click on each of them and select End Task to end these entries. Find Microsoft Edge entries and select 'End Task'

Resetting Microsoft Edge browser (Method 2):

If Method 1 failed to help you, you need to use an advanced Edge reset method.

  1. Note: you need to backup your data before using this method.
  2. Find this folder on your computer: C:\Users\%username%\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe.
  3. Select every entry which is saved on it and right click with your mouse. Then Delete option. Go to Microsoft Edge folder on your computer, right-click every entry and click 'Delete'
  4. Click the Start button (Windows logo) and type in window power in Search my stuff line.
  5. Right-click the Windows PowerShell entry and choose Run as administrator. Find Windows PowerShell, right-click it and select 'Run as administrator'
  6. Once Administrator: Windows PowerShell window shows up, paste this command line after PS C:\WINDOWS\system32> and press Enter:
    Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register $($_.InstallLocation)\AppXManifest.xml -Verbose}
    Copy and paste a required command and press 'Enter'

Once these steps are finished, Zeus Virus Detected should be removed from your Microsoft Edge browser.

WindowsMac OS XInternet ExplorerMicrosoft EdgeFirefoxGoogle ChromeSafari

Eliminate Zeus Virus Detected from Mozilla Firefox (FF)

To remove Zeus Virus Detected virus from your web browser completely, navigate to browser's settings as explained below and reset its settings.

  1. Remove dangerous extensions
    Open Mozilla Firefox, click on the menu icon (top right corner) and select Add-ons Extensions. Click on menu icon and select 'Add-ons'
  2. Here, select Zeus Virus Detected and other questionable plugins. Click Remove to delete these entries. Select 'Extensions' and look for malicious entries. Click 'Remove' to get rid of each of them
  3. Reset Mozilla Firefox
    Click on the Firefox menu on the top left and click on the question mark. Here, choose Troubleshooting Information. Click on menu icon and then on '?'. Select 'Troubleshooting Information'
  4. Now you will see Reset Firefox to its default state message with Reset Firefox button. Click this button for several times and complete Zeus Virus Detected removal. Click on 'Reset Firefox' button for a couple of times
WindowsMac OS XInternet ExplorerMicrosoft EdgeFirefoxGoogle ChromeSafari

Get rid of Zeus Virus Detected from Google Chrome

The bulk of people experiencing intrusive pop-up alerts uses Google Chrome. The solution to this problem is simple. Adware infection can be eliminated from Chrome quite simply – by resetting it to default.

  1. Delete malicious plugins
    Open Google Chrome, click on the menu icon (top right corner) and select Tools Extensions. Click on menu icon. Select 'Tools' and 'Extensions'
  2. Here, select Zeus Virus Detected and other malicious plugins and select trash icon to delete these entries. Look for malicious entries and delete each of them by clicking on the Trash bin icon
  3. Click on menu icon again and choose Settings Manage Search engines under the Search section. When in 'Settings', select 'Manage search engines...'
  4. When in Search Engines..., remove malicious search sites. You should leave only Google or your preferred domain name. Click 'X' to remove malicious URLs
  5. Reset Google Chrome
    Click on menu icon on the top right of your Google Chrome and select Settings.
  6. Scroll down to the end of the page and click on Reset browser settings. When in 'Settings', scroll down to 'Reset browser settings' button and click on it
  7. Click Reset to confirm this action and complete Zeus Virus Detected removal. Click on 'Reset' button to complete your removal
WindowsMac OS XInternet ExplorerMicrosoft EdgeFirefoxGoogle ChromeSafari

Delete Zeus Virus Detected from Safari

  1. Remove dangerous extensions
    Open Safari web browser and click on Safari in menu at the top left of the screen. Once you do this, select Preferences. Click on 'Safari' and select 'Preferences'
  2. Here, select Extensions and look for Zeus Virus Detected or other suspicious entries. Click on the Uninstall button to get rid each of them. Go to 'Extensions' and uninstall malicious add-ons
  3. Reset Safari
    Open Safari browser and click on Safari in menu section at the top left of the screen. Here, select Reset Safari.... Click on 'Safari' and select 'Reset Safari...'
  4. Now you will see a detailed dialog window filled with reset options. All of those options are usually checked, but you can specify which of them you want to reset. Click the Reset button to complete Zeus Virus Detected removal process. Select all options and click on 'Reset' button

About the author

Ugnius Kiguolis
Ugnius Kiguolis - The mastermind

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Ugnius Kiguolis
About the company Esolutions

References