Soft2Securescam registry · since 2014
Scam registry·Tech-support pop-uparchived

"Zeus Virus Detected" Windows Defender alert page

A browser page styled as a Windows Defender alert: "Zeus Virus Detected In Your Computer", do not shut down, call technical support now. The page locks the browser; the number leads to a remote-access sale. Documented in 2017; the template still circulates with other virus names.

Impersonates
Microsoft (Windows Defender)
Arrives by
web page, phone call
First seen
2017-04
Last seen
2017-04
Specimens
1
Updated
2026-09-02

Right now the only version we have seen

How to recognise it

  1. A web page claims to scan your computer — a page cannot
  2. Capital letters, alarms, and a toll-free number
  3. Closing the tab or the browser fixes it

What to do

  1. Do not call; close the tab, or close the browser from Task Manager if the page blocks it
  2. Run your real antivirus if you want reassurance
Already called, clicked or paid? what to do in the next hour
  1. Gave remote access? Disconnect from the internet, uninstall the tool they had you install, change passwords from another device
  2. Paid by card or bank transfer? Call your bank now and dispute it. Gift cards? Call the card issuer with the card numbers
  3. Expect a call-back from a "refund department" — that is act two of the same scam. Hang up
Report:Microsoft: protect yourself from tech support scamsFTCMicrosoft: official page on scamsSend us your version

How it changed

nothing to compare yet · one wave on record
2017-04the Zeus alert page with a toll-free number
Got a different version? A new subject line, sender, number or domain becomes the next point on this line. Redacted before publication. Send it →
02 Sept2026
Registry

Family created

Grew out of the 2017 guide. Current versions of the same page are tracked under the Microsoft / Apple call-us family.

13 Apr2017
Specimen

Specimen №1: the Zeus alert page with a toll-free number

The guide quoted the page text and the number, and documented the browser-lock behaviour.

Subject
Windows Defender Alert: Zeus Virus Detected In Your Computer !!
Channel
web page

Windows Defender Alert: Zeus Virus Detected In Your Computer !! Please Do Not Shut Down or Reset Your Computer. The following data will be compromised if you continue: 1. Passwords 2. Browser History 3. Credit Card Information 4. Local Hard Disk Files. This virus is well known for complete identity and credit card theft. Further action through this computer or any computer on the network will reveal private information and involve serious risks. Call Technical Support Immediately at (888) 202-7560 Call Microsoft Technical Department: (888) 202-7560 (Toll Free)

Specimen of the "Zeus Virus Detected" Windows Defender alert page, as documented in the original guide
Reproduced as documented · numbered tells belowimage · embed with a link to this page
  1. 1 A web page cannot detect a virus on your computer
  2. 2 "Do not shut down" — because shutting down ends the scam
  3. 3 Microsoft does not put phone numbers in alerts
Source: soft2secure.com/knowledgebase/zeus-virus-detected-alert-scam

Same trick, other brands

Indicators · 1

  • +1 (888) 202-7560phone · 2017-04 → 2017-04

Indicators change weekly; an empty list never means an email is safe. Defanged: replace [.] with a dot.

In other streams

Registry data

Machine-readable
/scams/zeus-virus-detected-alert.json
Timeline feed
/scams/zeus-virus-detected-alert/feed.xml
Sources
1 · 1 change logged
Licence
CC BY 4.0 · attribution required
Created / updated
2026-09-02 / 2026-09-02