Appendix E - File types list overview
Applies to: Microsoft Antigen
This is a list of the file types that are used when creating file filters to detect files based solely on their content type. The program log number is reported in the Antigen program log when the associated file type is identified by a virus scanner or a file filter. For more information about detecting files by type, see “Filtering by file type” in Chapter 12 - Using file filtering.
Note
When a Microsoft® Office file (a PowerPoint®, Access, Excel®, or Word document) is embedded in another Office file, its data is included as part of the original Office file. These files are not scanned as individual files. However, if another file type (such as .exe) is embedded in one of these files and that file is subsequently embedded in an Office file, it will be detected and scanned as a separate file. (The .exe extension, however, is still visible because the icon is a GIF file that cannot be deleted. If you click on the file, the icon will be replaced with the correct TXT icon.)
| File type | Program log number | Description |
|---|---|---|
ANIFILE |
66 |
Windows® 95 animated cursor file. |
ARCFILE |
21 |
ARC compression format file. |
ARJFILE |
20 |
ARJ compression format file. |
AUTOCAD |
63 |
AutoCad file. |
AVIFILE |
29 |
Windows Audio/Visual file format (Audio/Video Interleaved resource interchange file format). |
BMPFILE |
24 |
Bitmap image file. |
DATAZFILE |
15 |
InstallShield file (InstallShield 3). |
DOCFILE |
6 |
Microsoft OLE Structured Storage file. The DOCFILE test checks for the OLE Structured Storage file format. Contained within this format is information that describes the application to use to process the data. Among the applications that use this format are those in the Microsoft Office suite: Word (.doc), Excel (.xls), PowerPoint (.ppt), Exchange Message files (.msg), and Shell scraps (.shs). |
EICAR |
5 |
Eicar test virus file. |
EPSFILE |
57 |
Encapsulated PostScript file (Adobe). |
EXEFILE |
3 |
Microsoft executable file. |
FONT_TYPE1 |
64 |
Adobe Type 1 font file. |
GIFFILE |
22 |
GIF image file. |
GZIPFILE |
16 |
GZip compression format file. |
HYPERARC |
54 |
ARC compression format file (Systems Enhancement Associates). |
ICOFILE |
27 |
Windows icon file. |
IS_UNINST |
48 |
InstallShield uninstall file. |
ISCABFILE |
14 |
Microsoft cabinet archive format file. |
JARFILE |
52 |
Java archive file. |
JAVACLASS |
45 |
Java byte code file (usually contained inside a JAR file). |
JPEG |
23 |
JPEG image file. |
LHAFILE |
12 |
Compression format file (LHA/LHARC). |
MACFILE |
77 |
A binary (nontext) format that encodes Macintosh files so that they can be safely stored or transferred through non-Macintosh systems. |
MDB |
71 |
Access database file. |
MP3FILE |
67 |
MP3 audio file. |
MPEG1 |
32 |
MPEG animation file (.mpg). |
MS_CHIFILE |
51 |
Document file for Microsoft Help index (.chi). |
MS_HELP |
50 |
Microsoft Help file (.hlp). |
MS_TYPELIB |
49 |
Microsoft Type Library file format (typically used for Microsoft ActiveX® service). |
MS_WMF |
59 |
Windows metafile format graphics (vectored and bit-mapped). |
MSCABFILE |
13 |
Cabinet file (Microsoft installation. archive). |
MSCOMPRESS |
17/18 |
Microsoft compression format file. |
MSIMC_MIME |
46 |
MIME formatted text file with IMC binary header. |
MSLIBRARY |
42 |
Microsoft object code library file. |
MSSHORTCUT |
44 |
Microsoft shortcut file (.lnk). |
NOTESDB |
68 |
Notes database file. |
OBJFILE |
43 |
Object code file (Intel Relocatable Object Module - .obj). |
OPENXML |
83 |
OpenXML file. This file type applies to Office Word, PowerPoint, and Excel 2007 files only. The Scan Doc Files As Containers settings in General Options (for Manual, Internet, and Realtime scan jobs) do not apply to Office 2007 files because these are always scanned as containers. Although OpenXML files are essentially ZIP containers and the individual files inside are scanned by Antigen, settings that affect ZIP files do not apply to them. OpenXML documents have an XML-based schema that Antigen cannot modify if an infection is found. Therefore, if an infection is in a file that is part of the XML schema, the file is not cleaned and the entire OpenXML document is deleted. However, if the infected file is not part of the XML schema, then Antigen will attempt to clean just that infected file (replacing it with the Deletion Text) and leave the rest of the OpenXML document intact. If it cannot be cleaned, just that file will be deleted. However, in practice, Office 2007 does not open any OpenXML file containing files that are not part of the XML schema. |
PALFILE |
26 |
Adobe PageMaker library palette file or a color palette file. |
PCXFILE |
25 |
Bitmap graphic file (PC Paintbrush). |
PDFFILE |
47 |
Portable Document Format file (Adobe). |
PIFFILE |
4 |
Program Information File (Windows), or Vector Graphics GDF format file (IBM mainframe computers). |
PKLITE |
55 |
PKLite compression format file. |
PNGFILE |
61 |
Bitmap graphics file (Portable Network Graphics). |
QTMovie |
31 |
QuickTime movie file. |
RARFILE |
76 |
RAR-compressed archive file. |
RIFFILE |
30 |
RIFF bitmap graphics file (Fractal Design Painter). |
SFXEXE |
73 |
Self-extracting executable file. |
TARFILE |
75 |
TAR archive format file (a UNIX method of archiving files that can also be used on personal computers). TAR archives files but does not compress them, so .tar files are compressed with other tools; this produces extensions such as .tar.gz, .tar.Z, and .tgz. |
TEXT |
1 |
Text file (.txt). |
TIFFILE |
62 |
Tagged Image File Format (TIFF) bitmap graphics file. |
TNEFFILE |
56 |
Microsoft Transport Neutral Encapsulation Format file (Message file). |
TRUETYPE |
65 |
Microsoft TrueType font file (.ttf). |
UNICODE |
2 |
Universal Character Code double-byte text file. |
UNIXCOMPRS |
53 |
Unix Compressed format file. |
VISIO_WMF |
60 |
Visio exported meta file. |
WAVFILE |
28 |
Waveform audio file (RIFF WAVE format). |
WINEXCEL1 |
8 |
Microsoft Excel 1.x file (.xls). |
WINWORD1&2 |
7 |
Microsoft Word (1.x and 2.x) file. |
WINWRITE |
9 |
Microsoft Write file. |
XARAFILE |
58 |
XaraX graphic file. |
ZIPFILE |
10 |
Compressed file created by PKZip. |
ZOOFILE |
19 |
Compressed file created by ZOO. |