Virus and Spyware Removal Guides, uninstall instructions

What is BigBossRoss?

BigBossRoss is a new variant of Garrantydecrypt ransomware. It is designed to prevent victims from accessing their files by encryption. In order to decrypt files, victims are forced to purchase a decryption tool from the cyber criminals who designed this ransomware.

BigBossRoss appends the ".bigbossross" extension to filenames of all encrypted files. For example, "1.jpg" becomes "1.jpg.bigbossross". It also creates the "#Decryption#.txt" file, which contains instructions about how to contact the developers of BigBossRoss ransomware.

What is MT88?

MT88 is a malicious program belonging to the Matrix ransomware family. It is designed to encrypt data and demand ransom payments for decryption. During the encryption process, affected files are renamed using the following pattern: "[MarkTrue88@protonmail.com].[random_string].MT88".

For example, following encryption, "1.jpg" might appear as something similar to "[MarkTrue88@protonmail.com].4j03ZPDY-IOlEpJJV.MT88", and so on.

After this process is finished, MT88 stores a ransom message ("!MT88_README!.rtf") in each existing folder and five additional files on the victim's desktop. The five desktop files are: "log.txt", "LFIN_[random_string].txt", "bad_[random_string].txt", "[random_string].exe", and "ALL_dmpfl.fldp".

What is Msop?

Msop is malicious software belonging to the Stop/Djvu ransomware family. It is designed to encrypt data and demand ransom payments for decryption. When it encrypts data, all affected files are appended with the ".msop" extension. Therefore, "1.jpg" becomes "1.jpg.msop", and so on for all compromised files.

After this process is complete, a text file ("_readme.txt") is stored on the desktop.

What is newsredirect[.]net?

newsredirect[.]net is an untrusted website. If opened, it loads dubious content or redirects visitors to other untrustworthy sites. Most people arrive at web pages such as newsredirect[.]net inadvertently, since they are redirected to them by potentially unwanted applications (PUAs) installed on their browsers and/or operating systems.

These apps are classed as PUAs, since few people download or install them intentionally. Furthermore, they usually record browsing data and display intrusive ads. Other examples of web pages similar to newsredirect[.]net are giantttraffic[.]com, localmylife[.]info, and ewaglongoo[.]com.

What is All Day Forecast?

All Day Forecast is a browser hijacker, endorsed as a tool for quick access to weather forecasts. It operates by modifying browsers to promote a fake search engine (search.halldayforecast.com).

Furthermore, this rogue application also possesses data tracking capabilities, which it employs to monitor users' browsing activity. Most users install All Day Forecast inadvertently, and therefore it is additionally categorized as a Potentially Unwanted Application (PUA).

What is Mapo?

Mapo is a new variant of another ransomware infection called Outsider. Like most programs of this type, it encrypts data, changes extensions of encrypted files, and creates a ransom message. It appends the ".mapo" extension to the filename of each encrypted file.

For example, "1.jpg" becomes "1.jpg.mapo", and so on. It also creates "MAPO-README.txt" containing the ransom message. Cyber criminals use Mapo to extort money from victims by leaving them with no other choice than to pay a ransom.

What is giantttraffic[.]com?

giantttraffic[.]com is one of many rogue websites online. Similar sites include localmylife.info, ewaglongoo.com, videostream.best, and so on. These web pages present users with dubious content and/or redirect them to other untrustworthy, even malicious websites.

Most visitors to giantttraffic[.]com access it unintentionally, since they are redirected by intrusive ads or Potentially Unwanted Applications (PUAs) already present on the device.

Note that these apps do not need express permission to be installed onto systems. After successful infiltration, however, they generate redirects, run intrusive advertisement campaigns, and track browsing-related data.

What is Great File Converter?

Great File Converter is a rogue application, advertised as a free tool capable of providing quick access to file conversion websites, accompanied by a "sponsored web search update". It is allegedly able to convert formats such as PDF, JPG, PNG, DOC, XLS, PPT, XPS, and others.

In fact, Great File Converter makes unauthorized changes to browsers to promote search.hgreatfileconverter.com, a fake search engine.

Therefore, this app is categorized as a browser hijacker. Furthermore, it monitors users' browsing activity and gathers their private data. Due to dubious methods used to proliferate Great File Converter, it is also classed as a Potentially Unwanted Application (PUA).

What is search.hlistentoliveradio.com?

Listen To Live Radio is advertised as a tool (application) that provides instant access to radio streaming content, however, it should not be trusted. Listen To Live Radio is a browser hijacker and a potentially unwanted application (PUA). It promotes a fake search engine by changing certain browser settings to search.hlistentoliveradio.com.

It also operates as an information tracking tool and collects browsing data. Listen To Live Radio is categorized as PUA, since few people download or install browser hijackers intentionally.

What is Bitx?

Discovered by Jakub Kroustek, Bitx is malicious software belonging to the Crisis/Dharma ransomware family. Devices infected with it have all data encrypted. The cyber criminals responsible for the infection demand payment for decryption. When Bitx encrypts files, they are appended with the victim's unique ID, developer's email address, and ".bitx" extension.

Therefore, "1.jpg" might appear similar to "1.jpg.id-1E857D00.[1btc@qbmail.biz].bitx". After this process is complete, a text file called "FILES ENCRYPTED.txt" is stored on the desktop and a pop-up window is displayed.