Zeus “Virus” Removal (Microsoft Support Scam), Updated Dec. 2016

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.


This page aims to help you remove Zeus “Virus” Scam. These Zeus “Virus” scam removal instructions work for every version of Mac and Microsoft Windows – 10, 7 and more.

Browser hijackers could be a form of panic-ware which tricks you into thinking that your computer has been infected when in fact all you are really experiencing is some form of a pop-up or browser redirect. They are becoming more and more common nowadays. In this article we will describe one particular hijacker (panic-ware) – Zeus “Virus”. Briefly speaking, these annoying programs may be fully capable of disturbing all your browsers (Safari/ Firefox/ Chrome/ etc.) and irritating you by constantly producing pop-up ads; sometimes redirecting you to various places or changing  your browser’s appearance by substituting your favorite search engine and homepage with new ones. For all details about Zeus, proceed with the following paragraphs.

Zeus Virus Scam Microsoft support

Zeus Virus Scam Sample

 

 

What is Zeus “Virus”?

What is typical of any hijacker you may come across on the web is that this kind of software may only affect your browsers. These programs may be able to cause some irritation by overwhelming the infected user with online advertisements; some undesired redirecting or some changes in the settings of the browsers, which haven’t been authorized by the user. What you should know, so that you can proceed calmly with solving the hijacker-caused problems, is that these annoying programs are NOT malicious. In order to illustrate the difference between Zeus, for instance, and any existing virus, we have prepared the comparison below:

  • Viruses DO infect any computer without the user’s permission. They do not trick you into installing them, they do that themselves. Also, depending on the kind of malware, their evil purposes and plans might be very disturbing and may include encryption of files (Ransomware-based viruses do that); an entire system crash (Trojans might inflict such a cyber-disaster); harassing via spying on you or blackmailing you for money in exchange of the encrypted data.
  • Zeus “Virus”, as an exemplary browser hijacker, could only inflict the aforementioned alterations in the settings and behavior of your browsers. What this hijacker could also do is access the browsing history records of your browsers and use the data from them in order to guess your preferences. It will then try to match the generated advertisements or the pages you are being redirected to your apparent interests. Also, the production of banners and pop-ups and the redirects may be causing your computer to slow down in a noticeable way, which may also be irritating.

Based on the facts above, we can conclude that there is nothing similar between Zeus (or any other hijacker-based program) and any of the known viruses in the cyber world. You have nothing to worry about in terms of your system’s safety; however, browser hijackers may not be among the software you want or need on your PC.

The program itself might be relatively harmless, but are all its effects legitimate?

There is nothing illegal about the consequences of the presence of Zeus “Virus” Scam on your PC. We are going to explain why the sometimes irritating redirecting, the unfamiliar homepage and search engine and all the pop-ups and banners are as legitimate as can be. The reason why all hijackers could affect your system in the aforementioned way is that their developers get paid for making them advertise websites, products, services – all kinds of goods, in an efficient way. By efficient they understand promoting these goods on a regular, sometimes too regular basis. This is how marketing works and you are exposed to such ads every day on the Internet, on TV, on the Radio, on billboards, in newspapers and magazines.

However, you may still lack the memory of installing Zeus “Virus” on your computer…

You may not remember installing Zeus “Virus” on your PC, because of the tricky ways such software may get distributed in. Almost always such programs are incorporated into software bundles – free mixtures of diverse apps, games and all types of other software. There is nothing malicious about these bundles, but their developers have often cunningly programmed them to play with the users’ naiveté and lack of patience. You are most likely to get infected with such a program in case you install the entire content of such a bundle. That’s why you should not get impatient. Please, take your time no matter what you install and follow the instructions below:

  • Always, no matter what, look for an option in the installation wizard that allows you to perform manual changes to the way you install a given piece of software. Such features are most often named either CUSTOM or ADVANCED.
  • Do not get tricked into installing any program in any “quick” or “default” way, as you may end up infected with various online annoyances.

In case you want to efficiently and safely remove Zeus Scam, please, proceed and check the Guide below. The instructions there are designed to help get your issue solved quickly and safely.

SUMMARY:

Name Zeus
Type Panic-ware/Browser Hijacker
Danger Level Medium (nowhere near threats like Ransomware, but still a security risk)
Symptoms Nothing really harmful or disturbing, just some annoying changes in the behavior of your browsers – changed search engine, some redirection occurring; some ads being produced.
Distribution Method Mostly as a component of free bundles. Also appears inside torrents, contagious websites, shareware.
Detection Tool

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you’ll need to purchase the full version.
More information about SpyHunter and steps to uninstall.

 

Zeus “Virus” Removal (Microsoft Support Scam)


If you are a Macintosh user please follow this link on how to remove Zeus Virus Scam.

Step1

Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).

Step2

WARNING!
To remove parasite, you may have to meddle with system files and registries. Making a mistake and deleting the wrong thing may damage your system.
Avoid this by using SpyHunter - a professional Parasite removal tool.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Reveal All Hidden Files and Folders.

  • Do not skip this  – Zeus may have hidden some of its files.

Hold together the Start Key and R. Type appwiz.cpl –> OK.

appwiz

You are now in the Control Panel. Look for suspicious entries. Uninstall it/them.

Type msconfig in the search field and hit enter. A window will pop-up:

msconfig_opt

Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.

Step3

Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.

Open the start menu and search for Network Connections (On Windows 10 you just write it after clicking the Windows button), press enter.

  1. Right-click on the Network Adapter you are using —> Properties —> Internet Protocol Version 4 (ICP/IP), click  Properties.
  2. The DNS line should be set to Obtain DNS server automatically. If it is not, set it yourself.
  3. Click on Advanced —> the DNS tab. Remove everything here (if there is something) —> OK.

DNS

Step4

Right click on the browser’s shortcut —> Properties.

NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge).

browser-hijacker-taskbar-properties

Properties —–> Shortcut. In Target, remove everything after .exe.

ie9-10_512x512  Remove Zeus “Virus” Scam from Internet Explorer:

Open IE, click  IE GEAR —–> Manage Add-ons.

pic 3

Find the threat —> Disable. Go to IE GEAR —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.

firefox-512 Remove Zeus “Virus” from Firefox:

Open Firefoxclick  mozilla menu  ——-> Add-ons —-> Extensions.

pic 6

Find the adware/malware or anything that looks suspicious —> Remove.
chrome-logo-transparent-backgroundRemove Zeus “Virus” from Chrome:

Close Chrome. Navigate to:

 C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:

Rename the Folder to Backup Default

Rename it to Backup Default. Restart Chrome.

  • At this point the threat is gone from Chrome, but complete the entire guide or it may reappear on a system reboot.

Step5

Press CTRL + SHIFT + ESC simultaneously. Go to the Processes Tab. Try to determine which ones are dangerous. Google them or ask us in the comments.

WARNING! READ CAREFULLY BEFORE PROCEEDING!

This is the most important and difficult part. If you delete the wrong file, it may damage your system irreversibly. If you can not do this,
>> Download SpyHunter - a professional parasite scanner and remover.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Right click on each of the problematic processes separately and select Open File LocationEnd the process after you open the folder, then delete the directories you were sent to.

malware-start-taskbar

Step6

Type Regedit in the windows search field and press Enter.

Inside, press CTRL and F together and type the threat’s Name. Right click and delete any entries you find with a similar name. If they don’t show this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Remember to leave us a comment if you run into any trouble!

Was this guide helpful?