Browser Redirect

Zeus “Virus” (Microsoft Support Scam)

Parasite may reinstall itself multiple times if you don't delete its core files. We recommend downloading SpyHunter to scan for malicious programs installed with it. This may save you hours and cut down your time to about 15 minutes. 

Download SpyHunter Anti-Malware

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

This page aims to help you remove Zeus “Virus” Scam. These Zeus “Virus” scam removal instructions work for every version of Mac and Microsoft Windows – 10, 7 and more.

Browser hijackers could be a form of panic-ware which tricks you into thinking that your computer has been infected when in fact all you are really experiencing is some form of a pop-up or browser redirect. They are becoming more and more common nowadays. In this article we will describe one particular hijacker (panic-ware) – Zeus “Virus”. Briefly speaking, these annoying programs may be fully capable of disturbing all your browsers (Safari/ Firefox/ Chrome/ etc.) and irritating you by constantly producing pop-up ads; sometimes redirecting you to various places or changing  your browser’s appearance by substituting your favorite search engine and homepage with new ones. For all details about Zeus, proceed with the following paragraphs.

Zeus Virus Scam Microsoft support

Zeus Virus Scam Sample



What is Zeus “Virus”?

What is typical of any hijacker you may come across on the web is that this kind of software may only affect your browsers. These programs may be able to cause some irritation by overwhelming the infected user with online advertisements; some undesired redirecting or some changes in the settings of the browsers, which haven’t been authorized by the user. What you should know, so that you can proceed calmly with solving the hijacker-caused problems, is that these annoying programs are NOT malicious. In order to illustrate the difference between Zeus, for instance, and any existing virus, we have prepared the comparison below:

  • Viruses DO infect any computer without the user’s permission. They do not trick you into installing them, they do that themselves. Also, depending on the kind of malware, their evil purposes and plans might be very disturbing and may include encryption of files (Ransomware-based viruses do that); an entire system crash (Trojans might inflict such a cyber-disaster); harassing via spying on you or blackmailing you for money in exchange of the encrypted data.
  • Zeus “Virus”, as an exemplary browser hijacker, could only inflict the aforementioned alterations in the settings and behavior of your browsers. What this hijacker could also do is access the browsing history records of your browsers and use the data from them in order to guess your preferences. It will then try to match the generated advertisements or the pages you are being redirected to your apparent interests. Also, the production of banners and pop-ups and the redirects may be causing your computer to slow down in a noticeable way, which may also be irritating.

Based on the facts above, we can conclude that there is nothing similar between Zeus (or any other hijacker-based program) and any of the known viruses in the cyber world. You have nothing to worry about in terms of your system’s safety; however, browser hijackers may not be among the software you want or need on your PC.

The program itself might be relatively harmless, but are all its effects legitimate?

There is nothing illegal about the consequences of the presence of Zeus “Virus” Scam on your PC. We are going to explain why the sometimes irritating redirecting, the unfamiliar homepage and search engine and all the pop-ups and banners are as legitimate as can be. The reason why all hijackers could affect your system in the aforementioned way is that their developers get paid for making them advertise websites, products, services – all kinds of goods, in an efficient way. By efficient they understand promoting these goods on a regular, sometimes too regular basis. This is how marketing works and you are exposed to such ads every day on the Internet, on TV, on the Radio, on billboards, in newspapers and magazines.

However, you may still lack the memory of installing Zeus “Virus” on your computer…

You may not remember installing Zeus “Virus” on your PC, because of the tricky ways such software may get distributed in. Almost always such programs are incorporated into software bundles – free mixtures of diverse apps, games and all types of other software. There is nothing malicious about these bundles, but their developers have often cunningly programmed them to play with the users’ naiveté and lack of patience. You are most likely to get infected with such a program in case you install the entire content of such a bundle. That’s why you should not get impatient. Please, take your time no matter what you install and follow the instructions below:

  • Always, no matter what, look for an option in the installation wizard that allows you to perform manual changes to the way you install a given piece of software. Such features are most often named either CUSTOM or ADVANCED.
  • Do not get tricked into installing any program in any “quick” or “default” way, as you may end up infected with various online annoyances.

In case you want to efficiently and safely remove Zeus Scam, please, proceed and check the Guide below. The instructions there are designed to help get your issue solved quickly and safely.


Name Zeus
Type Panic-ware/Browser Hijacker
Danger Level Medium (nowhere near threats like Ransomware, but still a security risk)
Symptoms Nothing really harmful or disturbing, just some annoying changes in the behavior of your browsers – changed search engine, some redirection occurring; some ads being produced.
Distribution Method Mostly as a component of free bundles. Also appears inside torrents, contagious websites, shareware.
Detection Tool

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you’ll need to purchase the full version.
More information about SpyHunter and steps to uninstall.


Zeus Virus Removal (Microsoft Support Scam)

If you are a Windows user, continue with the guide below.

If you are a Mac user, please use our How to remove Ads on Mac guide.

If you are an Android user, please use our Android Malware Removal guide.


Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).



We get asked this a lot, so we are putting it here: Removing parasite manually may take hours and damage your system in the process. We recommend downloading SpyHunter to see if it can detect parasite files for you.

Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab (the “Details” Tab on Win 8 and 10). Try to determine which processes are dangerous. 


Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:

Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at:

Scan Results

Virus Scanner Result

After you open their folder, end the processes that are infected, then delete their folders. 

Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections. 


Hold together the Start Key and R. Type appwiz.cpl –> OK.


You are now in the Control Panel. Look for suspicious entries. Uninstall it/them.

Type msconfig in the search field and hit enter. A window will pop-up:


Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.


Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.

Open the start menu and search for Network Connections (On Windows 10 you just write it after clicking the Windows button), press enter.

  1. Right-click on the Network Adapter you are using —> Properties —> Internet Protocol Version 4 (ICP/IP), click  Properties.
  2. The DNS line should be set to Obtain DNS server automatically. If it is not, set it yourself.
  3. Click on Advanced —> the DNS tab. Remove everything here (if there is something) —> OK.



  • After you complete this step, the threat will be gone from your browsers. Finish the next step as well or it may reappear on a system reboot.

Right click on the browser’s shortcut —> Properties.

NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge).


Properties —–> Shortcut. In Target, remove everything after .exe.

ie9-10_512x512  Remove Zeus Virus from Internet Explorer:

Open IE, click  IE GEAR —–> Manage Add-ons.

pic 3

Find the threat —> Disable. Go to IE GEAR —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.

firefox-512 Remove Zeus Virus from Firefox:

Open Firefoxclick  mozilla menu  ——-> Add-ons —-> Extensions.

pic 6

Find the adware/malware —> Remove.
chrome-logo-transparent-backgroundRemove Zeus Virus from Chrome:

Close Chrome. Navigate to:

 C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:

Rename the Folder to Backup Default

Rename it to Backup Default. Restart Chrome.


To remove parasite on your own, you may have to meddle with system files and registries. If you were to do this, you need to be extremely careful, because you may damage your system.

If you want to avoid the risk, we recommend downloading SpyHunter
a professional malware removal tool.

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

Type Regedit in the windows search field and press Enter.

Inside, press CTRL and F together and type the threat’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!

Leave a Comment