The Kaspersky ShadeDecryptor tool for decrypting files affected
by Trojan-Ransom.Win32.Shade
Archived: 2026-04-05 19:48:30 UTC
Latest update: October 9, 2024 ID: 13059
Do you want to prevent infections? Install Kaspersky Standard, Plus, or Premium
Complete security in the digital world for you & your family. Choose your perfect solution for any device.
The Trojan-Ransom.Win32.Shade malware encrypts files on your device to make it impossible to work with them.
Using the Kaspersky ShadeDecryptor tool, you can try to decrypt the files with the following extensions:
xtbl
breaking_bad
ytbl
heisenberg
better_call_saul
los_pollos
da_vinci_code
magic_software_syndicate
windows10
windows8
no_more_ransom
tyson
crypted000007
crypted000078
dexter
miami_california
rsa3072
decrypt_it
The tool searches for a decryption key in its database. If the key is found in the database, the files will be
decrypted. If the key is not in the databases, the tool will send a request to the server for additional keys. This
requires Internet access.
To prevent infection:
Download and install new Kaspersky applications that protect against screen-locking and file-encrypting
malware.
Follow the recommendations on how to protect your PC against file-encrypting ransomware.
https://support.kaspersky.com/13059
Page 1 of 2

Learn more about the technologies that Kaspersky uses to protect against malware, including encryptors, on the
TechnoWiki page.
How to decrypt files with Kaspersky ShadeDecryptor
What to do if the issue persists
Did you find this article helpful?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.
Source: https://support.kaspersky.com/13059
https://support.kaspersky.com/13059
Page 2 of 2