'ZEUS virus detected': an old name used as a costume

A pop-up announcing that Windows has detected the ZEUS virus, listing supposed threats and urging a call to support, is a scam. Zeus was a real banking trojan from years ago, which is exactly why scammers borrow the name, it sounds documented and frightening. The pop-up itself detects nothing, it is a web page that shows the same warning to every visitor.

Clear it and check properly

  1. Ignore the instructions on the page completely. No call, no download, no password entry.
  2. Close the browser with Task Manager (Ctrl+Shift+Esc, End task on the browser) if the page will not close normally.
  3. Reopen without restoring pages, then clear the site from history if it keeps suggesting itself.
  4. Do the real check inside Windows Security: open it from the Start menu, run a full scan, then a Microsoft Defender Offline scan for a second pass.
  5. If both scans are clean, the pop-up was the entire event. Nothing further needs fixing.

Why the ZEUS name still works on people

Scam pages rotate through names that carry weight: a real historical trojan, a Windows component, an error code that looks technical. The pattern underneath never changes, a frightening claim, a deadline, and a phone number. Real antivirus software names what it found, quarantines it, and reports it inside its own window, with no number to call and no countdown.

Downloaded the 'removal tool' it offered? Do not run it. Delete the file, then run a full scan with Windows Security. If it was run, treat the machine as untrusted until scans come back clean, and change important passwords from a different device. Report the page at reportfraud.ftc.gov.

Common questions

Was Zeus a real virus? Yes, Zeus (also called Zbot) was a real banking trojan, first seen in 2007 and largely disrupted years ago. Its fame is why the name appears in scam pop-ups. The pop-up is not a Zeus detection, it is a costume.

My antivirus did not pop up too. Does that mean it missed something? It usually means there was nothing to detect, the warning was only a web page. The way to be sure is a full scan from inside Windows Security or your installed antivirus, not the verdict of a browser tab.

Related

Microsoft Security Alert pop-up scam · 'Your Windows has been blocked' scam · Tech support scam pop-ups · Fake blue screen scam · Fake Error #268D3 · Clicked a phishing link?