How to remove the code as a video format on Facebook Messenger

A new type of malicious code disguised as a video file is attacking a series of Facebook Messenger accounts. When users open this malicious file, they will continue to send a series of messages to friends and relatives. This malicious code will produce Miner CPU malicious software, using infected computer resources to dig digital currencies like Bitcoin, DarkCoin or Ethereum without user permission.

Latest update: This malicious code constantly generates a new variant, users should not automatically click on the downloaded files attached to their Facebook Messenger if they do not know what it is. On the other hand, BKAV has confirmed to be able to remove this Facebook virus, please download BKAV to kill this virus.

Messenger has long been the target of malicious code dispersers, as this messaging and video calling service accounts for a large number of users in the world. As soon as malicious code attacks your Facebook account and is sent to Messenger, they will automatically send to other Facebook accounts in your friends list. Since then, the number of malicious code users through Messenger has increased. With this type of video format in the format of this video.zip file, they will automatically download and install some malicious files. Then proceed to decompress into files with the purpose of taking advantage of the computer resources used to dig virtual money.

The following article will guide you how to check if your computer is infected with malicious code, as well as how to remove this malicious code from your computer if it is accidentally infected.

1. Instructions for securing 2 layers of Facebook by phone number
2. How to secure your Facebook account so it won't be hacked?
3. 10 things to keep in mind about security with Facebook

How to detect and kill Facebook video.zip

Step 1:

If you accidentally downloaded this video, do not open it to view it. Then go to Virustotal and download the video.zip file onto the site's interface to check if the file is safe.

Step 2:

If you have already opened the file, access drive C on your computer and search for the Miner.exe file as shown below.

Step 3:

Next, open Ctrl + Shift + Esc to open Task Manager . Then click on the Details tab to check if any processes are running called code.exe or miner.exe .

If found, click on it and click End Task below to stop the process immediately.

If the search on Task Manager does not appear, your computer is not infected with malicious code.

After you've stopped the malicious code, go back to the folder containing the files and delete them from the device by selecting and pressing Ctrl + Shift + Del.

If you can't delete these files, check to make sure you've stopped all processes related to it in Task Manager. On the other hand, to be absolutely sure, install antivirus software like Avast, AVG, . and select custom scans, only scan the folder containing those files so that the antivirus software will delete them.

Step 4:

Proceed to secure 2-layer Facebook account via personal phone number. Refer to the article Turn on 2-layer security for Facebook

Step 5:

Then we need to quickly change the Faecbook password and log out of Facebook from all devices

Step 6:

Finally uninstall Chrome, remember to delete all browsing data and reset.

If you do all of the above 6 steps and your friend still receives the virus file from you, try doing it like this video tutorial from VTC.vn:

This is not the first case where Messenger is infected with malicious code, and in the future these same malicious codes will continue to attack users' Facebook accounts. If you receive a message from a friend, or anyone with a strange link, the unidentified file is absolutely not clicked to download. In addition, we can also take some remedial steps when Facebook is infected with the virus.

1. How to fix when Facebook is infected with virus