'Windows detected ZEUS virus' pop-up: fake — shut it down

A loud page announcing 'Windows detected ZEUS virus', warning you not to shut down or reset your computer and to call a number immediately, is scareware — a scam page, not a Windows detection. Zeus was a real banking trojan from years ago, which is exactly why scammers borrow the name: it sounds like something your antivirus would say. Your antivirus does not speak through web pages, does not forbid shutting down, and does not provide a phone number.

Close it — shutdown included

  1. Ignore every instruction on the page, including 'do not shut down'.
  2. Esc to exit full-screen, then Ctrl+Shift+Esc → browser → End task. Or simply restart the PC — equally fine.
  3. Don't restore the previous browser session when prompted.
  4. Run Windows Security → Full scan. If you want a second opinion, Microsoft Defender Offline scan (same app, under Scan options) reboots and scans before Windows loads.

Recognise the pattern next time

If you called the number: the 'technicians' are the threat, not the cure. Hang up, uninstall any remote tool they used, dispute any payment with your bank, and change banking/email passwords from a clean device. Steps in order: tech support scam recovery.

Common questions

It says do not shut down. Is shutting down dangerous? No — that instruction exists to keep you on the hook. Shutting down or restarting is completely safe here and ends the page. Nothing about a real infection is made worse by a normal shutdown.

Could I actually have the Zeus trojan? Zeus targeted Windows machines in the late 2000s/early 2010s and is long obsolete; modern Defender detects its families. A browser pop-up claiming it is not a detection either way — run a full Defender scan after closing the page and trust that result, not the page.

Related

Tech support scam pop-ups · Fake Windows Defender warning · Fake Error #268D3 · Fake ZEUS virus pop-up · Fake blue screen scam · Fake renewal email scam · Clicked a phishing link? · Fake Apple security warning · "Your computer has been locked" scam · Social Security scam calls · Fake Amazon account alerts · Someone has remote access to my computer