How to remove the code as a video format on Facebook Messenger

Type is attacking a series of Facebook Messenger accounts. When users open this malicious file, they will continue to send a series of messages to friends and relatives. This malicious code will produce Miner CPU malicious software, using infected computer resources to dig digital currencies such as Bitcoin, DarkCoin or Ethereum without user permission.

Latest update: This malicious code constantly generates a new variant, users should not automatically click on the downloaded files attached to their Facebook Messenger if they do not know what it is. On the other hand, BKAV has confirmed to be able to remove this Facebook virus, please go to kill this virus.

Messenger has long been the target of malicious code dispersers, as this messaging and video calling service accounts for a large number of users in the world. As soon as malicious code attacks your Facebook account and is sent to Messenger, they will automatically send to other Facebook accounts on your friends list. Since then, the number of malicious code users through Messenger has increased. With this type of video format in the format of this video.zip file, they will automatically download and install some malicious files. Then proceed to decompress into files with the aim of taking advantage of the computer resources used to dig virtual money.

The following article will guide you how to check if your computer is infected with malicious code, as well as how to remove this malicious code from your computer if it is accidentally infected.

How to detect and kill Facebook video.zip

Step 1:

If you accidentally downloaded this video, do not open it to view it. Then go to Virustotal and download the video.zip file onto the site's interface to check if the file is safe.

Step 2:

If you have already opened the file, access drive C on your computer and search for the Miner.exe file as shown below.

Step 3:

Next, open Ctrl + Shift + Esc to open Task Manager. Then click on the Details tab to check if there is any running process called code.exe or miner.exe.

If found, click on it and click End Task below to stop the operation immediately.

After you've stopped the malicious code, go back to the folder containing the files and delete them from the device by selecting and pressing Ctrl + Shift + Del.

If you can't delete these files, check to make sure you've stopped all processes related to it in Task Manager. On the other hand, to be absolutely sure, install Avast, AVG, ... and select custom scans, just scan the folder containing those files so that the antivirus software will delete them.

Step 4:

Proceed to secure 2-layer Facebook account via personal phone number. Refer to the article

Step 5:

Then we need to quickly change the password Faecbook and

Step 6:

Finally uninstall Chrome, remember to delete all browsing data and reset.

If you do all of the above 6 steps and your friends still receive the virus file from you, try doing it like this video tutorial from VTC.vn:

This is not the first case where Messenger is infected with malicious code, and in the future these same malicious codes will continue to attack users' Facebook accounts. If you receive a message from a friend, or anyone with a strange link, the unidentified file is absolutely not clicked to download. In addition, we can also take some remedial steps when Facebook is infected with the virus.

Đây không phải là trường hợp đầu tiên Messenger bị nhiễm mã độc, và trong tương lai những loại mã độc tương tự như vậy vẫn sẽ tiếp tục tấn công tài khoản Facebook của người dùng. Nếu bạn nhận được tin nhắn từ bạn bè, hoặc bất kỳ ai với kiểu link lạ, tập tin không rõ nguồn gốc thì tuyệt đối không được nhấp vào để tải xuống. Ngoài ra, chúng ta cũng có thể tiến hành một số bước khắc phục khi Facebook bị nhiễm virus.