• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar

Geek's Advice

IT News, Software Reviews, How To's & Computer Help

  • News
  • Reviews
  • Removal guides
  • Fix
  • Tutorials
  • Forum
  • ASK A GEEK

Remove “Is That You” Facebook Virus (2022 Guide)

September 11, 2020 By Scott Bolton Leave a Comment

“Is That You” Facebook virus aims to obtain sensitive data and spread other cyber threats

Contents

  • “Is That You” Facebook virus aims to obtain sensitive data and spread other cyber threats
    • Scam campaign has been killed once but raises again in 2020
    • Consequences of clicking on “Its You” Facebook virus video
    • Summary
  • Infected users continue the cycle of infections via the Messenger app
  • Easy steps to remove “Is That You” Facebook virus entirely

“Is That You” malware is categorized as a Facebook virus that can trick people into giving out their private information or infiltrate other malicious programs onto the targeted system. Usually, it operates as a question on the popular social media’s messenger app. Once people are infected, their friend list receives a message with a link that asks whether that is the person in question. Unfortunately, the link is either programmed to install further cyber threats or deceive the victim into giving out credentials.

Users who click on the video link included in the message are redirected to a fake Youtube page and a messenger-alike log in window pops up. Many people are tricked to believe that the screen is real and enter their emails and passwords to see the so-called video. Sadly, the login page is merely an imitation and collects entered credentials to a remote server controlled by cybercriminals. In other terms, the “Is That You” video acts as a catch to get people’s interest and is non-existent.

an example of is that you facebook virus
“Is That You” Facebook virus appends a malicious link to collect credentials and spread other cyber threats via Messenger app.

Another version of It’s You Facebook virus acts as a deceptive tool to obtain likes for “VIDEO HD Group”. Users also receive the message asking if it is them with a given link that appears as Youtube URL. Although, once they click on it, they are asked to first press the like button on the previously mentioned group, and only then they will be redirected to the supposedly private video.

We believe it is evident that the developers of this scam are merely trying to gain people’s interest and use it for for their own benefits. Likewise, if you receive such message with a link, do not press on it and close it instead to remove Is That You Facebook virus or at least prevent it from infiltrating further cyber threats on your computer.

Scam campaign has been killed once but raises again in 2020

While Its you video virus belongs to the infamous Facebook malware, the first version of it has been detected in 2017. That time social media’s team had quickly patched the vulnerability and stopped the scam from spreading further. However, not for long as another variant reappeared on the platform in 2019.

The upgraded version was called It Looks Like You Facebook virus and was hitting users in early December. One feature why it differed from its previous variants is that is was programmed to distribute other malicious programs. The embedded link redirected users to a suspicious page where they could get attacked by various types of computer infections.

versions of its you facebook virus
Multiple message versions of “Its You” Facebook video virus appeared through the period of 2017-2020.

Additionally, it kept trying to steal valuable information by displaying a Facebook login screen. In simple terms, when users entered their details, such as email addresses, passwords or other credentials, they were transferred directly to online hackers. Keep in mind that viruses that belong to Facebook malware category are still active in 2020 and you should beware of them while using this social media platform.

Consequences of clicking on “Its You” Facebook virus video

When people receive “Its You” Facebook video link, they are played to click on it. Unfortunately, the video does not exist and is merely created to perform certain redirects to various pages, that include advertising pop-ups, fake login pages, malware distribution sources, and affiliated content. None of these websites are safe to use for regular computer users and may lead to damaging consequences.

For example, if you are redirected to a fraudulent login website of any type and enter your details, they are uploaded on a remote server online. Only cybercriminals have access to it and might either sell your emails, passwords and other credentials on the underground market or use your accounts for further scams, hoaxes, and blackmailing.

Furthermore, the majority of redirects by this unusual malware lead to various questionable websites. Many of them are designed to spread various types of cyber threats, including spyware, adware, or even file-encrypting viruses. Likewise, it is essential that you would not click on the given link and start Is this you Facebook virus removal by closing the message. Further elimination instructions with the help of RESTORO are appended below.

Summary

Name“Is That You” Facebook virus
TypeMalware, Scam, Phishing attempt
FamilyFacebook Virus
SymptomsUsers receive a note via Facebook Messenger that includes a video link asking if it’s you; Usually, the message might include a person’s name and use various emojis to make it look like coming from a real person.
Message variants“Its You”, “Is This you” ,”It’s You”, “Is That You”, “It Looks Like You”, “Hahaha”, “Is This Your Video”, etc
DamageThose who click on the provided link risk to expose their credentials or be redirected to malware distribution sources and infect their computers with dangerous cyber threats
DistributionScript that targets Facebook Messenger App
RemovalYou should clean your system with RESTORO to ensure that the malware is eliminated safely

Infected users continue the cycle of infections via the Messenger app

Similar to other social media viruses, this cyber threat spread via a chain reaction mechanism. In simple terms, users who are infected spread the malware through their friend list on the platform using Messenger app. Everyone who click on the link become infected and start distributing the virus across their contacts.

There is evidence that the malicious program can even operate based on the geographic location and adapt the deceptive messages to the language spoken. It is common that the text includes its target’s name, then encourages to watch the video and ends up with an emoji of surprise. Currently, it is unknown to how many languages it can be translated to.

Our team suggests you to stay away from unverified websites if you want to protect your computer. Most of the advertising content online can lead to less than reliable pages and help infiltrate malware. Therefore, not only refrain from clicking on pop-up ads but also monitor what groups you join on the social media to avoid malicious links and advertisements.

Finally, the wisest decision would be to always use two-factor authentication and create unique passwords on your accounts. If you have accidentally clicked on the malicious link, change your password immediately and inform your friends to protect themselves against the potential FB virus.

Easy steps to remove “Is That You” Facebook virus entirely

If you believe that you have encountered this social media malware, you should first operate quickly and change your account’s password right away. Afterward, you can start to begin “Is That You” Facebook virus removal from your social media and computer itself.

Firstly, navigate to Facebook and disable malicious add-ons according to the steps below:

  1. Open and Log into Facebook;
  2. Go to Settings > General Account Settings;
  3. Open Apps on the left pane;
  4. Find Apps, Websites and Plugins and click Edit;
  5. Choose Disable to deny access to questionable third-party applications.

Then you must remove It’s You Facebook virus by running a full system scan with professional malware removal software. Even though there are many offered online, our top choice remains RESTORO. It is a powerful tool to not only help you clean and optimize your system but also fix virus damage afterward.

OUR GEEKS RECOMMEND

Our team recommends removing malware using a professional antivirus software and then using the following tool to repair virus damage to Windows system files:

REPAIR VIRUS DAMAGE TO YOUR COMPUTER

restoro advanced system repair box
DOWNLOAD RESTORO

RESTORO provides a free scan that helps to identify hardware, security and stability issues and presents a comprehensive report which can help you to locate and fix detected issues manually. It is a great PC repair software to use after you remove malware with professional antivirus. The full version of software will fix detected issues and repair virus damage caused to your Windows OS files automatically.

RESTORO uses AVIRA scanning engine to detect existing spyware and malware. If any are found, the software will eliminate them.

Read full review here.

GeeksAdvice.com editors select recommended products based on their effectiveness. We may earn a commission from affiliate links, at no additional cost to you. Learn more.

Is That You Facebook virus Removal Tutorial

To remove the unwanted program from your computer, use these instructions below to uninstall associated programs or apps from your Windows or Mac computer. Then scroll down for instructions how to clean each affected web browser individually.

Remove Is That You Facebook virus from Windows

Windows 10/8.1/8 users

Click on the Windows logo to open Windows menu. In search, type control panel and select the matching result. Then go to Programs and Features.How to launch Programs and Features in Windows 10,8.1,8

 

Windows 7 users

First, open Windows menu by clicking on the icon in the lower left corner of the screen. Then go to Control Panel and find section called Programs. Click on the Uninstall a program option under it.How to open uninstall a program in Windows 7

 

Windows XP users

In Windows XP, click Start > Control Panel > Add or Remove Programs.How to reach add or remove programs in Windows XP

Uninstall unwanted programs

Once in Programs and Features, look through the list of installed programs. You can click on Installed on tab to sort the programs by their installation date.

Right-click on suspicious programs you can't remember installing and choose Uninstall. Follow instructions provided by the Uninstall Wizard, click Next and finally Finish to uninstall the unwanted program from your PC.
how to uninstall unwanted programs from PC

Remove Is That You Facebook virus from Mac

  1. Click on Finder.
  2. Go to Applications folder.
  3. Look for suspicious applications you can't remember installing. Right-click them and select Move to Trash.uninstall unwanted apps from mac
  4. After moving all suspicious apps to Trash, right-click the Trash bin in Mac's Dock and select Empty Trash.
To remove Mac threats automatically, we strongly recommend using robust and well-reviewed antivirus solution INTEGO.
AUTOMATIC REMOVAL

See Full Review

Remove using INTEGO ANTIVIRUS for Mac (includes scanning for iOS devices). The one-of-a-kind security suite provides VirusBarrier X9 real-time protection against Mac and Windows-based malware, removes existing threats and scans for malware in popular e-mail clients. Includes NetBarrier X9, an intelligent firewall for home, work and public connections.

Chrome Firefox MS Edge Safari Internet Explorer

Remove Is That You Facebook virus from Google Chrome

Remove suspicious Chrome extensions

  1. Open Chrome and type chrome://extensions into address bar and press Enter.
  2. Here, look for suspicious extensions, and Remove them.
  3. Don't forget to confirm by pressing Remove in the confirmation pop-up.
    Remove suspicious chrome extensions

Change Start Page settings

  1. In Chrome address bar, type chrome://settings and press Enter.
  2. Scroll down to the On startup section. Check for suspicious extensions controlling these settings, and Disable them.
  3. Additionally, you can set browser to Open a specific page or set of pages via these settings. Simply choose this option, click Add a new page, enter your preferred URL (f.e. www.google.com) and press Add.change hijacked start page in chrome

Change default search settings

  1. In Chrome URL bar, type chrome://settings/searchEngines and press Enter. Make sure you type searchEngines, not searchengines. Additionally, you can go to chrome://settings and find Manage search engines option.
  2. First, look at the list of search engines and find the one you want to set as default. Click the three dots next to it and select Make Default.
  3. Finally, look through the list and eliminate suspicious entries. Right-click the three dots and select Remove from the list.change default search engine in chrome

Remove push notifications from Chrome

If you want to get rid of the annoying ads and so-called push-notifications viruses, you must identify their components and clean your browser. You can easily remove ads from Chrome by following these steps:

  1. In Google Chrome, press on Menu (upward arrow) in the top-right corner of the window.
  2. Select Settings.remove push notifications from chrome steps 1 2
  3. Go to Privacy and Security > Site Settings.
    remove push notifications from chrome step 3
  4. Open Notifications.
    remove push notifications from chrome step 4
  5. Here, go to the Allow list and identify suspicious URLs. You can either Block or Remove by pressing on the three vertical dots on the right side of the URL. However, we suggest the Block option, so the site won't ask you to enable the notifications if you ever visit it again.
    remove push notifications from google chrome step 5

Reset Google Chrome browser

  1. The final option is to reset Google Chrome. Type chrome://settings in the URL bar, press Enter  and then scroll down until you see Advanced option. Click it and scroll to the bottom of the settings.
  2. Click Restore settings to their original defaults.
  3. Click Restore settings to confirm.
    how to reset google chrome
Chrome Firefox MS Edge Safari Internet Explorer

Remove Is That You Facebook virus from Mozilla Firefox

Remove unwanted add-ons from Firefox

  1. Open Firefox and type about:addons in the URL bar. Press Enter.
  2. Now, click on Extensions (in the left section).
  3. Click Remove next to every suspicious browser add-on that you can't remember installing.
    Remove suspicious extensions from Firefox

Change Firefox Homepage

  1. In Firefox address bar, type about:preferences and hit Enter.
  2. Look at the left and click the Home tab.
  3. Here, delete the suspicious URL and type or paste in the URL of a website you'd like to set as your homepage.
    change firefox homepage altered by the unwanted program

Alter preferences in Firefox

  1. Type about:config in Firefox address bar and hit Enter.
  2. Click I accept the risk! to continue.
  3. Here, type in the URL which has taken over your browser without your knowledge. Right-click each value that includes it and choose Reset.
    remove firefox preferences associated with the unwanted program

Remove annoying push notifications from Firefox

Suspicious sites that ask to enable push notifications gain access to Mozilla's settings and can deliver intrusive advertisements when browsing the Internet. Therefore, you should remove access to your browser by following these simple steps:

  1. In Mozilla Firefox, click on Menu (the three horizontal bars) on the top-right corner of the window, then choose Options.disable firefox push notifications step 1
  2. Click on Privacy and Security, then scroll down to Permissions section.
  3. Here, find Notifications and click Settings button next to it.
    disable firefox push notifications step 2
  4. Identify all unknown URLs and choose to Block them. Click Save Changes afterward.
    disable push notifications in firefox step 3

Reset Mozilla Firefox

  1. In Firefox, type about:support in the address bar and press Enter.
  2. Click on Refresh Firefox...
  3. Click Refresh Firefox again to confirm.
    how to reset firefox browser
Chrome Firefox MS Edge Safari Internet Explorer

Remove Is That You Facebook virus from Microsoft Edge

Remove suspicious extensions:

  1. Open MS Edge browser and click on the three dots button in the top right corner, then click on Extensions.
    Open Microsoft Edge extensions settings
  2. Look through the list of installed extensions and find the ones you can't remember installing or simply suspicious-looking ones. Right-click on them and choose Uninstall. Then confirm by pressing Uninstall again.
    uninstall ms edge extensions

Change MS Edge Start Page and default search engine:

  1. Click on the three dots again and go to Settings. First, make sure that you choose to Open Microsoft Edge with A specific page or pages option. Then click the X next to suspicious URLs and type in the one you want to set as your homepage. Click the Save icon to confirm.
    change ms edge homepage
  2. Click on the three dots > Settings. Scroll down and click on Show Advanced Settings. Then scroll down until you find Change search engine button. Click it. Here, select the search engine you prefer using and click Set as default.
    Additionally, we recommend selecting and Removing suspicious search engines.
    change default search in ms edge

Turn off push notifications in Edge

If you keep receiving pop-up ads or other promotional content while browsing on Microsoft Edge, your browser might be corrupted by a potentially unwanted program (PUP). You have to clean it — follow these easy instructions:

  1. In Microsoft Edge, open Menu (three horizontal dots) in the top-right corner of the screen and click Settings;
    turn off website notification in microsoft edge step 1
  2. Click on Advanced settings.
  3. Scroll down to the Website permissions section. Here, click Manage permissions.
    remove push notifications virus from microsoft edge steps 2 3
  4. Find Notifications and Remove all suspicious websites.
    remove push notifications from microsoft edge step 4

Clear browsing data

  1. Click on the three dots in the top right corner again and click on Settings. Find Clear browsing data section and click Choose what to clear button.clear browsing data in ms edge step 1
  2. In the next window, select all options and click Clear.
    ms edge clear browsing data step 2
Chrome Firefox MS Edge Safari Internet Explorer

Remove Is That You Facebook virus from Safari

Uninstall suspicious Safari extensions

  1. Open Safari and click on Safari button in the top left corner. Select Preferences in the menu that appears on the screen.
    how to open safari preferences
  2. Now, go to Extensions tab. Look at the left to see all installed extensions, click on suspicious ones and hit that Uninstall button as shown in the picture. Confirm your choice by clicking Uninstall again. Repeat until you get rid of all unwanted extensions.how to uninstall unwanted safari extensions

Change Safari Homepage and default search engine

  1. In Preferences, open the General tab. Here, check what URL is set as your homepage. Delete it and type in whatever URL you want to set as your Safari Start Page.
  2. Next, go to the Search tab. Here, choose what Search engine you want to set as default.how to change safari homepage and search engine
  3. Next, click on Manage websites... then Remove all... and then Done.
    Manage quick website search in Safari

Remove push notifications on Safari

Some suspicious websites can try to corrupt your Safari by asking to enable push notifications. If you have accidentally agreed, your browser will be flooded with various intrusive advertisements and pop-ups. You can get rid of them by following this quick guide:

  1. Open Safari and click on Safari button in the top-left corner of the screen to select Preferences;
    remove push notifications from safari step 1
  2. Go to Websites tab and navigate to Notifications on the left side toolbar.
    remove push notifications from safari steps 2 3

Reset Safari

  1. Click on Safari > Clear History...
  2. Then choose to clear All history and hit Clear History button to confirm.how to reset safari
  3. Go to Safari > Preferences and then open Privacy tab. 
  4. Click Manage Website Data... then Remove All. To finish, click Done.clear website data from safari
  5. Finally, clear Safari cache. In Safari Menu, click Develop > Clear Cache.clear safari Cache
Chrome Firefox MS Edge Safari Internet Explorer

Remove Is That You Facebook virus from Internet Explorer

TIP: If you are still using IE, we strongly advise using Microsoft Edge or a different browser because Microsoft is no longer providing technical or security support for IE browser.

Remove suspicious extensions from IE

  1. Now, go back to Toolbars and Extensions.
  2. Below Show:, select All add-ons.
  3. Right-click suspicious extensions and choose Disable, or, if available - Remove. 
  4. If any pop-up appears, confirm your choice.
    disable or remove IE extensionsTip: If you can't find any suspicious extensions, most likely you have uninstalled them via Programs and Features already. This mostly applies to IE browser.

Change default search provider and remove suspicious ones

  1. Open Internet Explorer and click on the gear icon in the top right of the window.
  2. Then select Manage Add-ons. 
  3. Here, click on Search Providers tab.
  4. Here, we recommend setting Bing, Google or another trusted and well-known search provider as default. To do it, right-click the provider and choose Set as default.
  5. Now you can right-click suspicious search providers and choose Remove.
    how to change search provider in internet explorer

Change IE Home Page

  1. In Internet Explorer, click the gear icon in the top left corner.
  2. Choose Internet Options.
  3. Change Home Page URL to whatever page you want to use as your homepage.
  4. Click Apply.
  5. Click OK.how to change ie homepage

Block pop-up notifications on Internet Explorer

Suspicious websites can gain access to your Internet Explorer browser through push notifications. If you enable them even by accident, you will start receiving numerous annoying ads and other advertising content while browsing. The easiest way to remove push-notification viruses is by performing the following steps:

  1. In Internet Explorer, click on the Menu (the gear button) on the top-right corner of the window, then select Internet Options.
    disable puhs notifications virus in internet explorer
  2. Go to the Privacy tab;
  3. Look for Pop-up Blocker section and select Settings;
    remove push notifications from internet explorer steps 2 3
  4. Scroll through all URLs and you can Remove them one by one or all at the same time. Click Close.
    disable push notifications from internet explorer step 4

Reset Internet Explorer

  1. Click the gear icon in IE menu > Internet Options. Now click on Advanced tab.
  2. Under Reset Internet Explorer settings, click Reset...
  3. Click on the checkbox next to Delete personal settings.
  4. Click Reset.
  5. To finish, click Close.how to reset internet explorer easily

Alternative software recommendations

Malwarebytes Anti-Malware

Removing spyware and malware is one step towards cybersecurity. To protect yourself against ever-evolving threats, we strongly recommend purchasing a Premium version of Malwarebytes Anti-Malware, which provides security based on artificial intelligence and machine learning. Includes ransomware protection. See pricing options and protect yourself now.

get malwarebytes premium

System Mechanic Ultimate Defense

If you're looking for an all-in-one system maintenance suite that has 7 core components providing powerful real-time protection, on-demand malware removal, system optimization, data recovery, password manager, online privacy protection and secure driver wiping technology. Therefore, due to its wide-range of capabilities, System Mechanic Ultimate Defense deserves Geek's Advice approval. Get it now for 50% off. You may also be interested in its full review.

Disclaimer. This site includes affiliate links. We may earn a small commission by recommending certain products, at no additional cost for you. We only choose quality software and services to recommend.

scott bolton
Scott Bolton

Scott Bolton is a senior content strategist in our Geek’s Advice team. He is exceptionally passionate about covering the latest information technology themes and inspire other team members to follow new innovations. Despite the fact that Scott is an old-timer among the Geeks, he still enjoys writing comprehensive articles about exciting cybersecurity news or quick tutorials.

Related posts:

  1. Remove Facebook virus (Malware Removal Instructions) Facebook virus on a rise with a new “Look what...
  2. Remove XcodeSpy malware (Mac Virus Removal Guide) XcodeSpy malware delivered through compromised Xcode projectsContentsXcodeSpy malware delivered through...
  3. Facebook security breach puts 50 million user accounts at risk Failure to secure “View As” feature results in Facebook vulnerability...

Filed Under: Removal guides, Virus Tagged With: Facebook

Reader Interactions

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

SEARCH OUR SITE

Trending

decrypt files locked by stop djvu ransomware virus

Decrypt Files Locked by STOP/DJVU Ransomware (Updated 2022 Guide)

You can decrypt or repair files encrypted by … [Read More...] about Decrypt Files Locked by STOP/DJVU Ransomware (Updated 2022 Guide)

Remove STOP/DJVU Ransomware Virus (2022 Guide)

STOP/DJVU ransomware has more than 500 versions: … [Read More...] about Remove STOP/DJVU Ransomware Virus (2022 Guide)

Remove Segurazo Antivirus (SAntivirus Removal Guide 2021)

Segurazo review: is it a virus? Segurazo … [Read More...] about Remove Segurazo Antivirus (SAntivirus Removal Guide 2021)

easy ways to fix dns_probe_finished_nxdomain error on windows, mac, android, chromebook

Fix DNS_PROBE_FINISHED_NXDOMAIN Error (Windows, Mac, Android, Chromebook)

DNS_PROBE_FINISHED_NXDOMAIN error … [Read More...] about Fix DNS_PROBE_FINISHED_NXDOMAIN Error (Windows, Mac, Android, Chromebook)

POPULAR SOFTWARE REVIEWS

Private Internet Access Review

Private Internet Access Review 2022: Fast, Secure & Cheap VPN

Private Internet Access (PIA) VPN maintains its long-term role as a leader Private Internet … [Read More...] about Private Internet Access Review 2022: Fast, Secure & Cheap VPN

intego antivirus for windows review 2021

INTEGO ANTIVIRUS for Windows Review 2022: Strong rival to existing security products

Intego Antivirus for Windows: exceptional security for your PC INTEGO ANTIVIRUS for Windows is … [Read More...] about INTEGO ANTIVIRUS for Windows Review 2022: Strong rival to existing security products

INTEGO antivirus review for Mac 2021

Intego Antivirus Review: Best Mac Antivirus in 2022?

Intego Antivirus for Mac is probably the best security choice for OS X Intego Antivirus for Mac … [Read More...] about Intego Antivirus Review: Best Mac Antivirus in 2022?

OUR EXPERTS RECOMMEND

Comprehensive PC Repair Software

geek's advice recommends restoro pc repair as editors choice
DOWNLOAD NOW
  • Uses Avira engine to remove malware
  • Repairs Virus Damage
  • Fixes Windows Errors & BSOD
  • Replaces Damaged DLLs
  • Repairs Damaged Windows Settings
  • Identifies Hardware Problems

Compatible with Microsoft Windows.

Read Full Review

Robust Mac Antivirus

geek's advice recommends intego antivirus as editors choice
GET INTEGO
  • 24/7 real-time protection
  • Intelligent firewall
  • Scans emails for malware
  • Scans iOS devices & external drives
  • Excellent malware detection rate
  • Easy-to-use

Compatible with Mac OS X 10.9-11.

Read Full Review

Copyright © 2022 Geeksadvice.com. Any unauthorized copying, redistribution or reproduction of part or all of the site contents in any form is prohibited.

About Us · Terms of Use · Privacy Policy · Contact Us

We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we will assume that you are happy with it.Ok