What is _HOWDO_text.html? Should I remove it?

by Alice Woods - -

Why do I see _HOWDO_text.html on my computer?

If you see _HOWDO_text.html on your computer’s desktop, you are probably infected with serious cyber infection. This file belongs to one of the files that today's most dangerous ransomware — ODIN virus and appears on the computer once the virus is done encrypting data. Taking a few steps back, we should talk a bit about what the ransomware virus is, in the first place. In the most general terms, it is a malicious application which breaks into computers with the help of Trojans, exploit kits or spam. The software is designed to scan the system and external storage drives that might be plugged into the computer for various file extensions, and when these extensions are detected, it encrypts them with a sophisticated cipher. Virus creators use the locked files to blackmail their owners and demand them to pay considerable amounts of money to get these files back. These demands and further data recovery instructions are listed in the documents that the virus creates on the infected computer’s desktop and every folder with malware-affected files. For this reason, these documents have been dubbed ransom notes.

Apart from _HOWDO_text.html, Odin virus usually drops two more files — _5_HOWDO_text.html and _HOWDO_text.bmp. In these documents the criminals provide their victims with a short run-through of what happened to their computers and give recommendations on how they can fix it. The victims are demanded to transfer hundreds of dollars to an anonymous BitCoin account. They are also provided with an identification number and an email for the supposed support service. Though these ransom notes are not infectious themselves (ODIN executable is responsible for the data encryption) they signify serious problems. Though you should remove _HOWDO_text.html from your PC, you should make sure you eliminate it along with the virus itself. Otherwise, even this seemingly innocent file can help the virus regenerate and infect your future files. To make sure your system is completely clear, please run reputable antivirus utility, such as Reimage to scan your system.

How do the hackers distribute this file?

_HOWDO_text.html is automatically generated after the ODIN virus infects and encrypts the computer. This file does not travel on its own. For it to appear on your computer, you have to be infected with ODIN ransomware. As we have mentioned, you may accidentally download this virus on your computer along with Trojan-infested software or files; the virus may also come attached to spam emails and camouflage itself as a legitimate Word, PDF file or a Dropbox link. You should by no means download unknown software or files. Even if you obtain some application from a source you trust, you should scan it with an antivirus utility just in case. You can never be too careful.

Remove _HOWDO_text.html and ODIN ransomware:

If you already see _HOWDO_text.html on your computer do not panic. Disconnect your device from the network immediately and run it in Safe Mode. When you reboot your computer, scan it with an antivirus utility without delay. In case the scan does not initiate, this might mean that you will need to decontaminate the infection manually. Follow the instructions provided in our recently published ODIN removal guide. After you unblock your antivirus, don't forget to scan your computer again.

verdict - status of the file:
dangerous file
Advice: If your computer seems sluggish, or you are suffering from unwanted advertisements and redirects to unknown websites, we highly recommend you to scan it with reputable anti-spyware program. Do some FREE scan tests and check the system for unwanted applications that might be responsible for these problems.
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software you agree to our privacy policy and agreement of use.
do it now!
Problem diagnosis program Happiness
Problem diagnosis program Happiness
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is a recommended tool to scan your system for possible threats and crappy software. The trial version of the product will find harmful applications in your system.
More information about this program can be found in Reimage review.
Press mentions on Reimage

About the author

Alice Woods
Alice Woods - Likes to teach users about virus prevention

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Alice Woods
About the company Esolutions

Removal guides in other languages