Member Avatar for hangingguy

there are some .gif file like 1.gif 2.gif n soon which lie on temporary file and which is creating some problem in system....it is sometime also present in processes....can anyone please tell me how to get rid from that file and can anyone tell me the solution of shutdown virus...please help me ...

  • 4 Contributors
  • 3 Replies
  • 119 Views
  • 8 Months Discussion Span
  • Latest Post Latest Post by DianaD9

Dani AI

Generated

For : numeric-named .gif files in a Temp folder can be either harmless cache images or malware using a misleading name. The immediate goal is to identify whether the file is an actual GIF image or an executable/script that just looks like one, then stop any running shutdown action and contain the machine before trying repairs.

A short, practical checklist (do these in order):

  • Do not double-click the file. Note the full path and file size, then check the file signature by opening it in a plain text editor. Image files start with GIF while executables start with MZ; if you see MZ, treat it as an executable.
  • Upload the suspicious file or its hash to VirusTotal for multi-engine scanning before removing it.
  • Use Process Explorer to find any running process that points to that Temp file (right‑click the process → Properties → Image). Use Autoruns to find and disable persistent startup entries.
  • If a shutdown is in progress or scheduled, abort it with shutdown -a (run from Start → Run or a command prompt) then disconnect the PC from the network.
  • Run a full scan with a current anti‑malware product (use a second‑opinion scanner if needed). If the file is locked or a rootkit is suspected, boot from clean rescue media and scan offline.
  • Backup personal data to external media before attempting file deletion or system repair. If infections persist, a clean OS reinstall is the most reliable recovery.

Notes tied to earlier replies: ’s experience shows safe‑mode scanning can sometimes help, but rootkits often require offline tools. ’s pointer to vendor writeups is useful; vendor removal guides and rescue ISOs are the right next step. For an unsupported OS (Windows 2000/XP) strongly consider migrating—these systems no longer receive security fixes.

Recommended Answers

All 3 Replies

Member Avatar for Bob_180_Bob

for the info on the shutdown virus see..

Please explain what problems are being caused by you .gif files?? .gif files are just photos you have on your hard drive and saved in a temp file.

Member Avatar for DianaD9

I had the shutdown virus with bsod on my laptop (Windows 2000).. It was hard to get rid of, but this worked for me! I tried starting my pc, but of course it looks like its loading like normal but it isn't. It had a shutdown restart virus and I didn't want to do any hard mods. So, I quickly go to the safe mode selection mode by selecting F8. Then, I select VRA debugging mode and it looks like it freezes on a blank blue screen. Well, I left the comp for about 2 hours. I came back, saw it was still on a blue screen. Restarted the pc again, and ta daaaa! It displayed the startup screen like normal again. Well, then to prevent any type of further damage I downloaded avast! That program is great. It actually detected about 6 different malware programs! I guess the trick to the bsod is that it makes it look like debugging mode is not working, when in fact it is! That's why the blue screen freezes at debugging, so you don't know its working! Pretty diabolical, I can tell you. But this fix worked for me!

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.