Lilmoon is a ransomware from the VoidCrypt family. This ransomware encrypts files and then appends a certain .Lilmoon extension to the filenames. As a result of the ransomware attack, it's not possible to use the files anymore. Then the ransomware instructs the victims to pay a special ransom for file restoration. Yet, paying the ransom isn't a good idea. This doesn't guarantee the file restoration. If you pay the ransom you may just waste the money. Get rid of this file virus with Combo Cleaner Antivirus via the official page -
https://www.combocleaner.com and thus get your data always protected with its help in the future.
Note that Combo Cleaner Antivirus does not decrypt files initially encrypted by ransomware. It helps to delete the ransomware-type infection and protects your data from ransomware attacks in the future, however, it does not decrypt the files already damaged by the ransomware.
More information about this threat can be found in this detailed guide -
https://www.pcrisk.com/removal-guides/26128-lilmoon-ransomware
Quotation from the ransom note is mentioned below:
QUOTE
Your Files Are Has Been Locked
Your Files Has Been Encrypted with cryptography Algorithm
If You Need Your Files And They are Important to You, Dont be shy Send Me an Email
Send Test File + The Key File on Your System (File Exist in C:/ProgramData example : RSAKEY-SE-24r6t523 pr RSAKEY.KEY) to Make Sure Your Files Can be Restored
Get Decryption Tool + RSA Key AND Instruction For Decryption Process
Attention:
1- Do Not Rename or Modify The Files (You May loose That file)
2- Do Not Try To Use 3rd Party Apps or Recovery Tools ( if You want to do that make an copy from Files and try on them and Waste Your time )
3-Do not Reinstall Operation System(Windows) You may loose the key File and Loose Your Files
Your Case ID :
OUR Email :
[email protected]
in Case of no answer:
[email protected]
UNQUOTE