LAST UPDATED: OCT 17, 2022
You see a pop up saying there is a virus detected on your Mac named Zeus:
What is a Zeus Virus?
Zeus Virus is a fake warning alert on malicious links or advertisements you tried to access. It tricks you to call a fake support hotline that will access your computer remotely.
How do I get rid of it?
Remove Zeus Virus manually:
Expand All
1. Remove Suspicious Login Items
Remove Suspicious Login Items
- Go to > System Preferences...> Users & Groups.
- Make sure your profile is highlighted and the lock icon is unlocked, then click the Login Items tab.
- Click on any recently-added suspicious applications, then click the - (minus) sign to disable the application.
2. Remove malicious profile configurations
Remove malicious profile configurations
Check if there are profile configurations recently added on your Mac that may affect how your mac and its installed apps works. It is not common to have a profile unless you create a personalized configuration for your mac computer. Malicious profiles are usually bundled from third party apps.
- Go to > System Preferences > Profiles.
You can skip this solution if there is NO Profiles in System Preferences. It means there is no installed or created Profile Configuration on your Mac.
- Check and choose any profile that you did not set up. Select the profile, then click the button to remove it.
4. Remove Malicious Apps
Remove Malicious Apps in Applications
Remove installed application on your Mac that may have been a bundled program installed from a third-party app that you are not familiar.
Note: Be careful when deleting files in these locations. If you are not sure on what you are doing, contact us at mac_support@trendmicro.com
- Go to Finder > Go > Applications.
- Drag all unfamiliar apps from the Applications folder to the Trash .
- Empty Trash.
5. Remove suspicious extensions on web browsers
Remove malicious extensions on web browsers
Remove installed browser extensions that might cause the redirection:
Expand All
Remove in Safari
- Open Safari.
- Go to Safari > Preferences > Extensions.
- Look for any unfamiliar extension, then click the Uninstall button.
Remove in Chrome
- Open Google Chrome.
- Go to Chrome > Preferences > Extensions.
- Look for any unfamiliar extension, then click the Uninstall button.
Remove in Firefox
- Open Firefox.
- Go to Firefox > Preferences > Extensions & Themes.
- Under Manage your Extensions, look for any unfamiliar extension.
- Click the icon beside the extension, then click the Remove button.
6. Remove malicious files and folders
Remove suspicious files and folders
- Open Finder.
- On your keyboard, press COMMAND + SHIFT + . at the same time to show hidden files.
- Click Go > Go to Folder....
- Type the following locations below one at time, then click Go:
- ~/Library/LaunchAgents
- /Library/LaunchAgents
- /Library/LaunchDaemons
- Drag and drop unfamiliar items to Trash.
8. Reset your browser
Reset your browser
Before resetting, back up your favorites/bookmarks first. This will uninstall add-ons, delete browser history, reset your homepage and remove all custom settings.
Remove Zeus Virus with Trend Micro Antivirus One
It may take some time to go through every file, folder and browsers mentioned in all the steps listed above.
Trend Micro Antivirus One can protect your Mac from all potential risks and attacks, so you can enjoy browsing online.
It also provides real-time scanning and eliminates browser hijackers before they even leave a trace.
Download Antivirus One on the App Store
I have Trend Micro Antivirus One installed
Run the Smart Scan in Antivirus One:
- Open Antivirus One.
- Click Smart Scan, then click Clean Now.
How helpful was this article?
Thank you for your feedback!
Feedback entity isn't available at the moment. Try again later.
