- Downloaded
- 57.6 GB
- Uploaded
- 16 TB
- Ratio
- 285.11
- Seedbonus
- 329,011
- Upload Count
- 83 (96)
Member for 6 years
Review
ShadeDecryptor is a decryptor tool that can help people get back their files encrypted by all strains of Shade/Troldesh ransomware, no matter which version of Shade got them into trouble. Shade, also known as Troldesh, is nasty crypto that began spreading back in 2015. It encrypted office documents, pictures, and archives (as well as some other types of files) and then asked victims to pay for decryption. Different strains used fancy filenames such as breaking_bad and da_vinci_code. Shade also brought friends along — it downloaded other malware after it encrypted everything it wanted.
The Trojan-Ransom.Win32.Shade malware encrypts user files and makes them impossible to use. With Kaspersky ShadeDecryptor user can try to decrypt files with the following extensions:
- xtbl,
- breaking_bad;
- ytbl;
- heisenberg;
- better_call_saul;
- The chickens;
- da_vinci_code;
- magic_software_syndicate;
- windows10;
- windows8;
- no_more_ransom;
- tyson;
- crypted000007;
- crypted000078;
- dexter;
- miami_california;
- rsa3072;
- decrypt_it.
The utility searches for the decryption key in its database. If the key exists in the database, the files are decrypted. If the key is missing, the utility sends a request to the server to check if additional keys are available. User's computers must be connected to the Internet.
To avoid infection:
download and install the Kaspersky Internet Security application which allows user to configure protection against ransomware and programs that block the screen;
use the recommendations in this article.
How to decrypt files using Kaspersky ShadeDecryptor:
- Download and extract archive;
- Run the ShadeDecryptor.exe file on the infected computer;
- Run the Kaspersky ShadeDecryptor utility;
- Read the license agreement and click Accept;
- Click Change parameters;
- Select the disks to scan and delete encrypted files after decryption;
- Click on OK;
- Click on Start scan;
- Specify the path to an encrypted file. If the utility cannot determine the infection identifier, it will prompt the user to specify the path to the Readme.txt file;
- The utility will decrypt the files and delete the encrypted copies. To consult:
- Information on the analysis performed, click Details;
- The history of all analyzes, at the top right of the window, click on Report.
- Good luck
System requirements:
OS: Microsoft Windows® XP, Windows® Vista, Windows® 7, Windows® 8, Windows® 8.1, Windows® 10 (both 32 & 64-bit).
Install notes:
1. Extract and run the executable file;
2. Enjoy!
Screenshots:
Virus free! 100% clean!
File: ShadeDecryptor.exe
You must be registered for see links
01/73MD5: F3C55EB450A74C7D3698326D3EDC04F2
SHA1: 174895256F58E738DC8908F28F3E30DD714764B3
SHA256: B6C2078342340DBCD52D79B818E3758997F3065463C1031666E4C0AE0F25C404
Kind regards,
@Mirkec
in collaboration with TeamOS
Download links - version (Size: 2.48 MB):
You must be registered for see links
You must be registered for see links
You must be registered for see links
You must be registered for see links
I don't need this right now but it's wise to be
