Quick procedure to eliminate OSIRIS-9b28.html from Computer

OSIRIS-9b28.html is an executed file which has been generated from .Osiris Ransomware or Locky Ransomware virus. It is a malicious file which keeps appearing in front of the Users as after installation of their associated Ransomware. It is one of the malicious files that are being used by Ransomware as pop-up window in order to display ransom demands. This vermin appears in front of the Users as ransom note and demands for some ransom about 0.5 to 5 Bit-Coins in order to restore the files. Besides that, it will also claim to delete some victim’s personal as well as valuable files if the ransom is not paid within time.

How OSIRIS-9b28.html will install?

Ransomware like OSIRIS-9b28.html basically get installed inside the marked Computer through bundling process. However, bundling method is a legal method in order to introduce some new program and their functions to the Users. But some Cyber Criminals were also uses this method in illegal purpose. They often use this method to inject their malicious programs inside marked System. They simply combine OSIRIS-9b28.html with some third party’s freeware as well as shareware program so as they got downloaded this vermin will also get installed on PC.

How did OSIRIS-9b28.html work?

As after making successful installation, OSIRIS-9b28.html will start scanning the System’s allocated files in order to proceed with their encryption. This vermin has been featured with powerful AES-128 and RSA-2048 chipper which by using this this vermin can easily encrypts the System’s files. Technically during encryption process, rename the System files and replace their original name with set of random symbol characters [8 symbols]–[4 symbols]–[4 symbols]–[8 random symbols]–[12 random symbols] where the first 16 characters will represents victim’s ID.

Once it manages to complete encryption process, the Ransomware will put OSIRIS-9b28.html name ransom note in each of the System’s folder which explains to pay certain amount of money within time. According to ransom note, it explains:




All of your files are encrypted with RSA-2048 and AES-128 ciphers.

More information about RSA and AES can be found here:

hxxp://en.wikipedia.org/wiki/RSA (cryptosystem)

hxxp://en.wikipedia.org/wiki/Advanced Encryption Standard

Decrypting of your files is only possible with the private key and decrypt program, which is on our secret server.

To receive your private key follow one of the links:

If all of this addresses are not available, follow these steps:

  1. Download and install Tor Browser: hxxp://www.torproject.org/download/download-easy.html
  2. After a successful installation, run the browser and wait for initialisation.
  3. Type in the address bar:
  4. Follow the instructions on the site.

!!! Your personal identification ID: D56F3331E80D9E17 !!!


+*-++|| *==_*-a-


How to delete OSIRIS-9b28.html and recover file?

It is already point out, OSIRIS-9b28.html Ransomware’s file which is used to display ransom note in front of the Users. As long as this vermin installed inside the PC, the consequences of this threat is unpredictable even you already paid this vermin ransom. Hence it is highly recommended to install and run expert’s effective Automatic Removal Tool inside Computer to remove OSIRIS-9b28.html.

Leave a reply