Intel Security, working collaboratively with another security vendor and global law enforcement, were able to extract the decryption keys for the Shade ransomware. As part of that effort, we developed a decryption tool capable of unlocking user files, applications, databases, applets, and other objects infected by the Shade ransomware. This tool is available free as a part of the “No More Ransom” project, an initiative with law enforcement to share ransomware threat intelligence, coordinate malware campaign takedowns, educate users on how to protect themselves, and provide tools to unlock infected systems.
The Shade Ransomware Decryptor Tool is provided as-is and subject to Intel Security's End User License Agreement. Decryption keys may not be available in all instances.