'.L1LL File Extension' Ransomware

The '.L1LL File Extension' Ransomware is an encryption ransomware Trojan that was first observed on March 18, 2019. The '.L1LL File Extension' Ransomware carries out a typical encryption ransomware attack, which makes the victims' files unusable and then demands a ransom payment in exchange for the decryption key needed to restore the affected data. Ransomware threats like the '.L1LL File Extension' Ransomware are often distributed via corrupted spam email attachments which use damaged scripts to install the '.L1LL File Extension' Ransomware on the victim's computer.

The '.L1LL File Extension' Ransomware will Render Your Files Useless

The '.L1LL File Extension' Ransomware uses the AES and RSA encryptions in its attack. The '.L1LL File Extension' Ransomware targets the victim's files and encrypts their contents using these strong encryption algorithms, which makes them inaccessible. The '.L1LL File Extension' Ransomware targets the user-generated files in its attacks, which may include databases, documents, media files, and numerous other data containers. The following are examples of the files that threats like the '.L1LL File Extension' Ransomware target in these attacks:

.jpg, .jpeg, .raw, .tif, .gif, .png, .bmp, .3dm, .max, .accdb, .db, .dbf, .mdb, .pdb, .sql, .dwg, .dxf, .cpp, .cs, .h, .php, .asp, .rb, .java, .jar, .class, .py, .js, .aaf, .aep, .aepx, .plb, .prel, .prproj, .aet, .ppj, .psd, .indd, .indl, .indt, .indb, .inx, .idml, .pmd, .xqx, .xqx, .ai, .eps, .ps, .svg, .swf, .fla, .as3, .as, .txt, .doc, .dot, .docx, .docm, .dotx, .dotm, .docb, .rtf, .wpd, .wps, .msg, .pdf, .xls, .xlt, .xlm, .xlsx, .xlsm, .xltx, .xltm, .xlsb, .xla, .xlam, .xll, .xlw, .ppt, .pot, .pps, .pptx, .pptm, .potx, .potm, .ppam, .ppsx, .ppsm, .sldx, .sldm, .wav, .mp3, .aif, .iff, .m3u, .m4u, .mid, .mpa, .wma, .ra, .avi, .mov, .mp4, .3gp, .mpeg, .3g2, .asf, .asx, .flv, .mpg, .wmv, .vob, .m3u8, .dat, .csv, .efx, .sdf, .vcf, .xml, .ses, .qbw, .qbb, .qbm, .qbi, .qbr , .cnt, .des, .v30, .qbo, .ini, .lgb, .qwc, .qbp, .aif, .qba, .tlg, .qbx, .qby , .1pa, .qpd, .txt, .set, .iif, .nd, .rtp, .tlg, .wav, .qsm, .qss, .qst, .fx0, .fx1, .mx0, .fpx, .fxr, .fim, .ptb, .ai, .pfb, .cgn, .vsd, .cdr, .cmx, .cpt, .csl, .cur, .des, .dsf, .ds4, , .drw, .eps, .ps, .prn, .gif, .pcd, .pct, .pcx, .plt, .rif, .svg, .swf, .tga, .tiff, .psp, .ttf, .wpd, .wpg, .wi, .raw, .wmf, .txt, .cal, .cpx, .shw, .clk, .cdx, .cdt, .fpx, .fmv, .img, .gem, .xcf, .pic, .mac, .met, .pp4, .pp5, .ppf, .nap, .pat, .ps, .prn, .sct, .vsd, .wk3, .wk4, .xpm, .zip, .rar.

The '.L1LL File Extension' Ransomware attack lets the encrypted files marked with the file extension '.L1LL,' which it adds to the file's name. Once the '.L1LL File Extension' Ransomware encrypts a file, it will no longer be accessible or recoverable.

The '.L1LL File Extension' Ransomware's Ransom Demand

The '.L1LL File Extension' Ransomware delivers a ransom note, demanding that the computer user makes a payment of a large ransom in exchange for the decryption key needed to restore the affected files. The '.L1LL File Extension' Ransomware drops a file named 'help.txt' on the infected computer's desktop. The message contained in this ransom note file reads:

'Hello. Your files have been encrypted.
For help, write to this e-mail: jilyjily@torbox3uiot6wchz.onion
You need to follow the following instructions:
a) Download and install TOR browser: hxxps://www.torproject.org/download/download-easy.html.en
b) From the TOR browser, follow the link: torbox3uiot6wchz.onion
c) Register your e-mail (Sign Up)
d) Write us on e-mail: jilyjily@torbox3uiot6wchz.onion
Attach to the letter 1-2 files (no more than 3 MB) and your personal key.
ATTENTION: e-mail (jilyjily@torbox3uiot6wchz.onion) accepts emails, only with e-mail registered in the TOR browser at torbox3uiot6wchz.onion
Your personal key:
[random characters]'

Computer users should ignore the '.L1LL File Extension' Ransomware's ransom demands and the contents of this file and to instead take preemptive measures against threats like the '.L1LL File Extension' Ransomware. Since after a '.L1LL File Extension' Ransomware attack the files cannot be restored, the best protection is to have backup copies of your files, which can then be used to replace any files encrypted by attacks like the '.L1LL File Extension' Ransomware.