9 Replies Latest reply on Aug 16, 2014 8:43 PM by Peter M Branched to a new discussion.

    Zeus Trojan Virus Popup

    clcowie

      I just had a popup window appear after opening Windows Explorer.  It's actually 2 windows. 

      It won't let me close either Window.

      I have McAfee Total Support installed.  Help!

        • 1. Re: Zeus Trojan Virus Popup
          Peter M

          1st thing to try would be power off immediately.   Then try to boot into Safe Mode and use System Restore to go back to before it happened.  If successful, temporarily disable System Restore to get rid of the infected restore point.

          There are some hints in the last link in my signature below.

           

          McAfee Stinger should remove it:  How to Use Stinger | McAfee Free Tools (try it in Safe Mode)

          There is also an excellent removal guide here:  Remove Zeus Trojan virus (Removal Instructions)


           


          Toronto ▪ Canada
          Volunteer Moderator - Consumer Products
          I CAN'T HELP PRIVATELY - PLEASE POST IN THE FORUMS
          Use Advanced Search To Find Answers

          Consumer Technical Support (alter Country @ top right as needed)

          Consumer Customer Service (Accounts, Billing, Registration, etc.)
          Anti-Spyware/Malware/Hijacker Removal Tools

          • 2. Re: Zeus Trojan Virus Popup

            doubtful this is really Zeus - the popup message is totally fake, as is the website - looks like a basic browser hijack.

             

            did you install something recently, or approve some activex or dynamic web content?

            • 3. Re: Zeus Trojan Virus Popup
              clcowie

              I haven't installed anything....and don't recall approving any actions.  It's been a while since I've used Windows Explorer though (I usually use Chrome)  So it may have taken place a while ago.  I suppose it could have been something hidden in something (a video perhaps) I clicked on within Social Media?  So is this something I can "un-hijack" myself or do I need a special app? 

              • 4. Re: Zeus Trojan Virus Popup
                clcowie

                How do I know whether I truly have the trojan or if this is just a fake ad in an attempt to extort money for a fake cleanup?  I haven't had any issues or any signs I've been infected other than this popup.  Is there a way of checking to see if I've actually been infected?  I've done a McAfee system scan and it didn't find anything.

                • 5. Re: Zeus Trojan Virus Popup
                  Peter M

                  I thought you said you couldn't get rid of it so it has to be malware of some kind.  Run Stinger as suggested after a reboot into Safe Mode, or run MalwareBytes Free see the link in my signature below.

                   

                  The only way of knowing for sure if you have an infection is to run a program called Hijackthis and post its log on one of the specialist forums listed further down that last link in my signature.

                  Unless you want to pay a hefty fee for professional malware removal which would be the alternative.

                   

                   

                  Toronto ▪ Canada
                  Volunteer Moderator - Consumer Products
                  I CAN'T HELP PRIVATELY - PLEASE POST IN THE FORUMS
                  Use Advanced Search To Find Answers

                  Consumer Technical Support (alter Country @ top right as needed)

                  Consumer Customer Service (Accounts, Billing, Registration, etc.)
                  Anti-Spyware/Malware/Hijacker Removal Tools

                  • 6. Re: Zeus Trojan Virus Popup
                    clcowie

                    Thank you Ex_Brit,

                    I really appreciate your help.

                     

                    The only reason I asked is after starting this discussion, but before getting your reply, I had rebooted my computer and the windows about Zeus went away.  When I went back into Internet Explorer I did get another window pop up with a message about my Java being out of date, and an additional window displaying a link to download said Java update.  Since I don't have Java loaded, so I knew this one was a fake....so just figured the Zeus one might have been a fake as well.  I have now done as you suggested and downloaded Stinger and ran the scan, but it didn't detect any threats(thank goodness).  I have also gone into my Internet Explorer Settings and reset all of the options back to factor defaults. When I reopened Internet Explorer.....no more pop ups.

                     

                    I had never had a window pop up like that before where it wouldn't allow you to close it......so automatically assumed I'd been infected with something.

                     

                    Thank you again for your assistance.

                    • 7. Re: Zeus Trojan Virus Popup
                      Peter M

                      Are you sure you don't have Java?  It has separate version for different browsers and it's important you keep it up to date as it has vulnerabilities.  But be caerful insdtalling/updating it as often there are optional extras you wont need so keep your eyes open.

                      You might want to run a scan with Malwarebytes Free - it's good at finding nasties.

                      I think you definitely had spyware on board and it's best to check and double-check.

                      • 8. Re: Zeus Trojan Virus Popup
                        clcowie

                        After writing my last reply, I also downloaded the free trial for the MalwareBytes you suggested and ran it.  That one picked up a bunch of malware that was on my computer.  Yikes!!  Now I'm trying to figure out where the heck I've been that I've picked up this much Malware. 

                         

                        After getting that pop up box, I went to the "Real" Java site and there was an option to detect what version of Java I have.....but it didn't detect anything, so I assumed that I didn't have Java downloaded.  Should I go back to the Java site and just download the latest version or leave as is?

                        • 9. Re: Zeus Trojan Virus Popup
                          Peter M

                          I said Malwarebytes Free not the free trial, that gives you Malwarebytes Pro the second you accept the free trial, don't accept it and the software remains free for use in perpetuity, all you need to do is update it whenever you go to use it..

                          Never mind, just make sure you uninstall it afterwards.

                           

                          It's up to your regarding Java - many things need it, so I would and set it to update automatically when it suggests that.