ShadeDecryptor can decrypt ransomware files with extensions .xtbl, .ytbl, .breaking_bad, .heisenberg, and others.

These are encrypted by the Trojan-Ransom.Win32.Shade malware.

ShadeDecryptor searches for the decryption key in its database. If the key is found in the database, the files are decrypted. If the key is not in the databases, the tool sends a request to the server for additional keys.

ShadeDecryptor requires Internet access.

ShadeDecryptor will decrypt the following extensions:

xtbl
breaking_bad
ytbl
heisenberg
better_call_saul
los_pollos
da_vinci_code
magic_software_syndicate
windows10
windows8
no_more_ransom
tyson
crypted000007
crypted000078
dexter
miami_california
rsa3072
decrypt_it

  Download