5 out of 21 rated this helpful - Rate this topic

File types list

Applies to: Forefront Security for Exchange Server

Topic Last Modified: 2007-12-21

This is a list of the file types that are used when creating file filters to detect files based solely on their content type. The program log number is reported in the Forefront Security for Exchange Server program log when the associated file type is identified by a virus scanner or a file filter. For more information about detecting files by type, see "Filtering by File Type" in File filtering.

Note:
When a Microsoft Office file (PowerPoint®, Access, Excel®, and Word document) is embedded in another Office file, its data is included as part of the original Office file. These are not scanned as individual files. If, however, another file type (such as .exe) is embedded in one of these files that is then embedded in an Office file, it will be detected and scanned as a separate file. (The .exe extension, however, is still visible because the icon is a GIF file that cannot be deleted. If you click the file, the icon will be replaced with the correct TXT icon.)

Note:

When a Microsoft Office file (PowerPoint®, Access, Excel®, and Word document) is embedded in another Office file, its data is included as part of the original Office file. These are not scanned as individual files. If, however, another file type (such as .exe) is embedded in one of these files that is then embedded in an Office file, it will be detected and scanned as a separate file. (The .exe extension, however, is still visible because the icon is a GIF file that cannot be deleted. If you click the file, the icon will be replaced with the correct TXT icon.)

File type

Program log number

Description

ANIfile

Microsoft Windows 95 animated cursor file

ARCfile

ARC compression format file

ARJfile

ARJ compression format file

AutoCad

AutoCad file

AVIfile

Windows Audio/Visual file format (Audio/Video Interleaved resource interchange file format)

BMPfile

Bitmap image file

DataZfile

InstallShield file (InstallShield 3)

Docfile

Microsoft OLE Structured Storage file

The Docfile test checks for the OLE Structured Storage file format. Contained within this format is information that describes the application to use to process the data. Among the applications that use this format are the Microsoft Office applications suite: Word (.doc), Excel (.xls), PowerPoint (.ppt), Exchange Message files (.msg), and Shell scraps (.shs).

Eicar

Eicar test virus file

EPSfile

Encapsulated PostScript file (Adobe)

EXE

Microsoft executable file

Font_Type1

Adobe Type 1 font file

GifFile

GIF image file

GZipFile

GZip compression format file

HyperArc

ARC compression format file (Systems Enhancement Associates)

ICOfile

Windows icon file

IS_Uninst

InstallShield uninstall file

ISCABfile

Microsoft cabinet archive format file

JarFile

Java archive file

JavaClass

Java byte code file (usually contained inside a JAR file)

JPEG

JPEG image file

LHAfile

Compression format file (LHA/LHARC)

MACFILE

A binary (non-text) format that encodes Macintosh files so that they can be safely stored or transferred through non-Macintosh systems

MDB

Access database file

MP3File

MP3 audio file

MPEG1

MPEG animation file (.mpg)

MS_Chifile

Document file for Microsoft Help index (.chi)

MS_Help

Microsoft Help file (.hlp)

MS_TypeLib

Microsoft Type Library file format (typically used for ActiveX service)

MS_WMF

Microsoft Windows metafile format graphics (vectored and bit-mapped)

MSCabFile

Cabinet file (Microsoft installation archive)

MSCompress

17/18

Microsoft compression format file

MSIMC_MIME

MIME formatted text file with IMC binary header

MSLibrary

Microsoft object code library file

MSShortCut

Microsoft shortcut file (.lnk)

NotesDB

Notes database file

OBJfile

Object code file (Intel Relocatable Object Module - .obj).

OPENXML

OpenXML File

Note:

This file type applies to Word, PowerPoint, and Excel 2007 files only. The Scan Doc Files As Containers settings in General Options (for each scan job) do not apply to Office 2007 files, since these are always scanned as containers. Although OpenXML files are essentially ZIP containers, and the individual files inside are scanned by FSE, settings that affect ZIP files do not apply to them. OpenXML documents have an XML-based schema which FSE cannot modify if an infection is found. Therefore, if an infection is in a file that is part of the XML schema, the file is not cleaned and the entire OpenXML document is deleted. However, if the infected file is not part of the XML schema, then FSE will attempt to clean just that infected file (replacing it with the Deletion Text) and leave the rest of the OpenXML document intact; if it cannot be cleaned, just that file will be deleted. However, in practice, Office 2007 does not open any OpenXML file containing files that are not part of the XML schema.

PALfile

Adobe PageMaker library palette file or a color palette file

PCXfile

Bitmap graphic file (PC Paintbrush)

PDFfile

Portable Document Format file (Adobe)

PIFfile

Program Information File (Windows), or Vector Graphics GDF format file (IBM mainframe computers)

PKLite

PKLite compression format file

PNGfile

Bitmap graphics file (Portable Network Graphics.)

QTMovie

Quick Time Movie file

RARFILE

RAR-compressed archive file

RIFfile

RIFF bitmap graphics file (Fractal Design Painter)

SFXexe

Self extracting executable file

TARFILE

TAR archive format file (a UNIX method of archiving files, which can also be used by personal computers). TAR archives files but does not compress them, so sometimes .tar files are compressed with other tools, which produces extensions like .tar.gz, .tar.Z, and .tgz.

Text

Text file (.txt)

TifFile

Tagged Image File Format (TIFF) bitmap graphics file

TNEFfile

Microsoft Transport Neutral Encapsulation Format file (Message file)

TrueType

Microsoft TrueType font file (.ttf)

Unicode

Universal Character Code double-byte text file

UnixComprs

Unix Compressed format file

Visio_WMF

Visio exported meta file

WavFile

Waveform audio file (RIFF WAVE format)

WinExcel1

Microsoft Excel 1.x file (.xls)

WinWord1&2

Microsoft Word (1.x and 2.x) file

WinWrite

Microsoft Write file

XaraFile

XaraX graphic file

ZipFile

Compressed file created by PKZip

ZOOfile

Compressed file created by ZOO

Did you find this helpful? Yes No

Not accurate

Not enough depth

Need more code examples

(1500 characters remaining)