The Kaspersky ShadeDecryptor tool for decrypting files affected by Trojan-Ransom.Win32.Shade

Do you want to prevent infections? Install Kaspersky for Windows

The Trojan-Ransom.Win32.Shade malware encrypts files on your device to make it impossible to work with them. Using the Kaspersky ShadeDecryptor tool, you can try to decrypt the files with the following extensions:

• xtbl
• breaking_bad
• ytbl
• heisenberg
• better_call_saul
• los_pollos
• da_vinci_code
• magic_software_syndicate
• windows10
• windows8
• no_more_ransom
• tyson
• crypted000007
• crypted000078
• dexter
• miami_california
• rsa3072
• decrypt_it

The tool searches for a decryption key in its database. If the key is found in the database, the files will be decrypted. If the key is not in the databases, the tool will send a request to the server for additional keys. This requires Internet access.

To prevent infection:

• Download and install new Kaspersky applications that protect against screen-locking and file-encrypting malware.
• Follow the recommendations on how to protect your PC against file-encrypting ransomware.

Learn more about the technologies that Kaspersky uses to protect against malware, including encryptors, on the TechnoWiki page.

 

How to decrypt files with Kaspersky ShadeDecryptor

 

What to do if the issue persists