The ShadeDecryptor tool for defending against Trojan-Ransom.Win32.Shade


General articles: Recovery tools


The ShadeDecryptor tool for defending against Trojan-Ransom.Win32.Shade

Back to "Recovery tools"
Latest update: June 15, 2021 ID: 13059

Do you want to prevent infections? Install Kaspersky Internet Security.

To download the ShadeDecryptor utility, click Download.


The Trojan-Ransom.Win32.Shade malware encrypts the files on the user's computer and makes them inaccessible. Using the ShadeDecryptor tool, you can try to decrypt files with the following extensions: 

  • xtbl
  • breaking_bad
  • ytbl
  • heisenberg
  • better_call_saul
  • los_pollos
  • da_vinci_code
  • magic_software_syndicate
  • windows10
  • windows8
  • no_more_ransom
  • tyson
  • crypted000007
  • crypted000078
  • dexter
  • miami_california
  • rsa3072
  • decrypt_it

The tool searches for the decryption key in its database. If the key is found in the database, the files are decrypted. If the key is not in the databases, the tool sends a request to the server for additional keys. This requires Internet access. 

To avoid infection:


How to decrypt files using ShadeDecryptor


What to do if the tool did not help

For more information about the Kaspersky technologies for defending against file-encrypting and screen-locking malware, see TechnoWiki.
Was this information helpful?
Yes No
Thank you


How can we improve this article?

Your feedback will be used for content improvement purposes only. If you need assistance, please contact technical support.

Submit Submit

Thank you for your feedback!

Your suggestions will help improve this article.