Zeus “Virus” (Microsoft Support Scam)

Zeus “Virus” (Microsoft Support Scam)Zeus “Virus” (Microsoft Support Scam)Zeus “Virus” (Microsoft Support Scam)

This page aims to help you remove Zeus “Virus” Scam. These Zeus “Virus” scam removal instructions work for every version of Mac and Microsoft Windows – 10, 7 and more.

Browser hijackers could be a form of panic-ware which tricks you into thinking that your computer has been infected when in fact all you are really experiencing is some form of a pop-up or browser redirect. They are becoming more and more common nowadays. In this article we will describe one particular hijacker (panic-ware) – Zeus “Virus”. Briefly speaking, these annoying programs may be fully capable of disturbing all your browsers (Safari/ Firefox/ Chrome/ etc.) and irritating you by constantly producing pop-up ads; sometimes redirecting you to various places or changing  your browser’s appearance by substituting your favorite search engine and homepage with new ones. For all details about Zeus, proceed with the following paragraphs.

Zeus “Virus” (Microsoft Support Scam)

Zeus Virus Scam Sample



What is Zeus “Virus”?

What is typical of any hijacker you may come across on the web is that this kind of software may only affect your browsers. These programs may be able to cause some irritation by overwhelming the infected user with online advertisements; some undesired redirecting or some changes in the settings of the browsers, which haven’t been authorized by the user. What you should know, so that you can proceed calmly with solving the hijacker-caused problems, is that these annoying programs are NOT malicious. In order to illustrate the difference between Zeus, for instance, and any existing virus, we have prepared the comparison below:

  • Viruses DO infect any computer without the user’s permission. They do not trick you into installing them, they do that themselves. Also, depending on the kind of malware, their evil purposes and plans might be very disturbing and may include encryption of files (Ransomware-based viruses do that); an entire system crash (Trojans might inflict such a cyber-disaster); harassing via spying on you or blackmailing you for money in exchange of the encrypted data.
  • Zeus “Virus”, as an exemplary browser hijacker, could only inflict the aforementioned alterations in the settings and behavior of your browsers. What this hijacker could also do is access the browsing history records of your browsers and use the data from them in order to guess your preferences. It will then try to match the generated advertisements or the pages you are being redirected to your apparent interests. Also, the production of banners and pop-ups and the redirects may be causing your computer to slow down in a noticeable way, which may also be irritating.

Based on the facts above, we can conclude that there is nothing similar between Zeus (or any other hijacker-based program) and any of the known viruses in the cyber world. You have nothing to worry about in terms of your system’s safety; however, browser hijackers may not be among the software you want or need on your PC.

The program itself might be relatively harmless, but are all its effects legitimate?

There is nothing illegal about the consequences of the presence of Zeus “Virus” Scam on your PC. We are going to explain why the sometimes irritating redirecting, the unfamiliar homepage and search engine and all the pop-ups and banners are as legitimate as can be. The reason why all hijackers could affect your system in the aforementioned way is that their developers get paid for making them advertise websites, products, services – all kinds of goods, in an efficient way. By efficient they understand promoting these goods on a regular, sometimes too regular basis. This is how marketing works and you are exposed to such ads every day on the Internet, on TV, on the Radio, on billboards, in newspapers and magazines.

However, you may still lack the memory of installing Zeus “Virus” on your computer…

You may not remember installing Zeus “Virus” on your PC, because of the tricky ways such software may get distributed in. Almost always such programs are incorporated into software bundles – free mixtures of diverse apps, games and all types of other software. There is nothing malicious about these bundles, but their developers have often cunningly programmed them to play with the users’ naiveté and lack of patience. You are most likely to get infected with such a program in case you install the entire content of such a bundle. That’s why you should not get impatient. Please, take your time no matter what you install and follow the instructions below:

  • Always, no matter what, look for an option in the installation wizard that allows you to perform manual changes to the way you install a given piece of software. Such features are most often named either CUSTOM or ADVANCED.
  • Do not get tricked into installing any program in any “quick” or “default” way, as you may end up infected with various online annoyances.

In case you want to efficiently and safely remove Zeus Scam, please, proceed and check the Guide below. The instructions there are designed to help get your issue solved quickly and safely.


Name Zeus
Type Panic-ware/Browser Hijacker
Danger Level Medium (nowhere near threats like Ransomware, but still a security risk)
Symptoms Nothing really harmful or disturbing, just some annoying changes in the behavior of your browsers – changed search engine, some redirection occurring; some ads being produced.
Distribution Method Mostly as a component of free bundles. Also appears inside torrents, contagious websites, shareware.
Detection Tool

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you’ll need to purchase the full version.
More information about SpyHunter and steps to uninstall.


Zeus Virus Removal (Microsoft Support Scam)

If you are a Windows user, continue with the guide below.

If you are a Mac user, please use our How to remove Ads on Mac guide.

If you are an Android user, please use our Android Malware Removal guide.

Zeus “Virus” (Microsoft Support Scam)

Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).

Zeus “Virus” (Microsoft Support Scam)


Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab (the “Details” Tab on Win 8 and 10). Try to determine which processes are dangerous. 

Zeus “Virus” (Microsoft Support Scam)

Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:

Zeus “Virus” (Microsoft Support Scam)
Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at: https://howtoremove.guide/online-virus-scanner/

Scan Results

Virus Scanner Result
Zeus “Virus” (Microsoft Support Scam)ClamAV
Zeus “Virus” (Microsoft Support Scam)AVG AV
Zeus “Virus” (Microsoft Support Scam)Maldet

After you open their folder, end the processes that are infected, then delete their folders. 

Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections. 

Zeus “Virus” (Microsoft Support Scam)

Hold together the Start Key and R. Type appwiz.cpl –> OK.

Zeus “Virus” (Microsoft Support Scam)

You are now in the Control Panel. Look for suspicious entries. Uninstall it/them.

Type msconfig in the search field and hit enter. A window will pop-up:

Zeus “Virus” (Microsoft Support Scam)

Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.

Zeus “Virus” (Microsoft Support Scam)

Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

Zeus “Virus” (Microsoft Support Scam)

If there are suspicious IPs below “Localhost” – write to us in the comments.

Open the start menu and search for Network Connections (On Windows 10 you just write it after clicking the Windows button), press enter.

  1. Right-click on the Network Adapter you are using —> Properties —> Internet Protocol Version 4 (ICP/IP), click  Properties.
  2. The DNS line should be set to Obtain DNS server automatically. If it is not, set it yourself.
  3. Click on Advanced —> the DNS tab. Remove everything here (if there is something) —> OK.

Zeus “Virus” (Microsoft Support Scam)

Zeus “Virus” (Microsoft Support Scam)

  • After you complete this step, the threat will be gone from your browsers. Finish the next step as well or it may reappear on a system reboot.

Right click on the browser’s shortcut —> Properties.

NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge).

Zeus “Virus” (Microsoft Support Scam)

Properties —–> Shortcut. In Target, remove everything after .exe.

Zeus “Virus” (Microsoft Support Scam)

Zeus “Virus” (Microsoft Support Scam)  Remove Zeus Virus from Internet Explorer:

Open IE, click  Zeus “Virus” (Microsoft Support Scam) —–> Manage Add-ons.

Zeus “Virus” (Microsoft Support Scam)

Find the threat —> Disable. Go to Zeus “Virus” (Microsoft Support Scam) —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.

Zeus “Virus” (Microsoft Support Scam) Remove Zeus Virus from Firefox:

Open Firefoxclick  Zeus “Virus” (Microsoft Support Scam)  ——-> Add-ons —-> Extensions.

Zeus “Virus” (Microsoft Support Scam)

Find the adware/malware —> Remove.
Zeus “Virus” (Microsoft Support Scam)Remove Zeus Virus from Chrome:

Close Chrome. Navigate to:

 C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:

Zeus “Virus” (Microsoft Support Scam)

Rename it to Backup Default. Restart Chrome.

Zeus “Virus” (Microsoft Support Scam)

Type Regedit in the windows search field and press Enter.

Inside, press CTRL and F together and type the threat’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!


About the author


Maria K.

Leave a Comment