File types list

 

Applies to: Forefront Security for Exchange Server

This is a list of the file types that are used when creating file filters to detect files based solely on their content type. The program log number is reported in the Forefront Security for Exchange Server program log when the associated file type is identified by a virus scanner or a file filter. For more information about detecting files by type, see "Filtering by File Type" in File filtering.

Note

When a Microsoft Office file (PowerPoint®, Access, Excel®, and Word document) is embedded in another Office file, its data is included as part of the original Office file. These are not scanned as individual files. If, however, another file type (such as .exe) is embedded in one of these files that is then embedded in an Office file, it will be detected and scanned as a separate file. (The .exe extension, however, is still visible because the icon is a GIF file that cannot be deleted. If you click the file, the icon will be replaced with the correct TXT icon.)

File type	Program log number	Description
ANIfile	66	Microsoft Windows 95 animated cursor file
ARCfile	21	ARC compression format file
ARJfile	20	ARJ compression format file
AutoCad	63	AutoCad file
AVIfile	29	Windows Audio/Visual file format (Audio/Video Interleaved resource interchange file format)
BMPfile	24	Bitmap image file
DataZfile	15	InstallShield file (InstallShield 3)
Docfile	6	Microsoft OLE Structured Storage file The Docfile test checks for the OLE Structured Storage file format. Contained within this format is information that describes the application to use to process the data. Among the applications that use this format are the Microsoft Office applications suite: Word (.doc), Excel (.xls), PowerPoint (.ppt), Exchange Message files (.msg), and Shell scraps (.shs).
Eicar	5	Eicar test virus file
EPSfile	57	Encapsulated PostScript file (Adobe)
EXE	3	Microsoft executable file
Font_Type1	64	Adobe Type 1 font file
GifFile	22	GIF image file
GZipFile	16	GZip compression format file
HyperArc	54	ARC compression format file (Systems Enhancement Associates)
ICOfile	27	Windows icon file
IS_Uninst	48	InstallShield uninstall file
ISCABfile	14	Microsoft cabinet archive format file
JarFile	52	Java archive file
JavaClass	45	Java byte code file (usually contained inside a JAR file)
JPEG	23	JPEG image file
LHAfile	12	Compression format file (LHA/LHARC)
MACFILE	77	A binary (non-text) format that encodes Macintosh files so that they can be safely stored or transferred through non-Macintosh systems
MDB	71	Access database file
MP3File	67	MP3 audio file
MPEG1	32	MPEG animation file (.mpg)
MS_Chifile	51	Document file for Microsoft Help index (.chi)
MS_Help	50	Microsoft Help file (.hlp)
MS_TypeLib	49	Microsoft Type Library file format (typically used for ActiveX service)
MS_WMF	59	Microsoft Windows metafile format graphics (vectored and bit-mapped)
MSCabFile	13	Cabinet file (Microsoft installation archive)
MSCompress	17/18	Microsoft compression format file
MSIMC_MIME	46	MIME formatted text file with IMC binary header
MSLibrary	42	Microsoft object code library file
MSShortCut	44	Microsoft shortcut file (.lnk)
NotesDB	68	Notes database file
OBJfile	43	Object code file (Intel Relocatable Object Module - .obj).
OPENXML	83	OpenXML File Note This file type applies to Word, PowerPoint, and Excel 2007 files only. The Scan Doc Files As Containers settings in General Options (for each scan job) do not apply to Office 2007 files, since these are always scanned as containers. Although OpenXML files are essentially ZIP containers, and the individual files inside are scanned by FSE, settings that affect ZIP files do not apply to them. OpenXML documents have an XML-based schema which FSE cannot modify if an infection is found. Therefore, if an infection is in a file that is part of the XML schema, the file is not cleaned and the entire OpenXML document is deleted. However, if the infected file is not part of the XML schema, then FSE will attempt to clean just that infected file (replacing it with the Deletion Text) and leave the rest of the OpenXML document intact; if it cannot be cleaned, just that file will be deleted. However, in practice, Office 2007 does not open any OpenXML file containing files that are not part of the XML schema.
PALfile	26	Adobe PageMaker library palette file or a color palette file
PCXfile	25	Bitmap graphic file (PC Paintbrush)
PDFfile	47	Portable Document Format file (Adobe)
PIFfile	4	Program Information File (Windows), or Vector Graphics GDF format file (IBM mainframe computers)
PKLite	55	PKLite compression format file
PNGfile	61	Bitmap graphics file (Portable Network Graphics.)
QTMovie	31	Quick Time Movie file
RARFILE	76	RAR-compressed archive file
RIFfile	30	RIFF bitmap graphics file (Fractal Design Painter)
SFXexe	73	Self extracting executable file
TARFILE	75	TAR archive format file (a UNIX method of archiving files, which can also be used by personal computers). TAR archives files but does not compress them, so sometimes .tar files are compressed with other tools, which produces extensions like .tar.gz, .tar.Z, and .tgz.
Text	1	Text file (.txt)
TifFile	62	Tagged Image File Format (TIFF) bitmap graphics file
TNEFfile	56	Microsoft Transport Neutral Encapsulation Format file (Message file)
TrueType	65	Microsoft TrueType font file (.ttf)
Unicode	2	Universal Character Code double-byte text file
UnixComprs	53	Unix Compressed format file
Visio_WMF	60	Visio exported meta file
WavFile	28	Waveform audio file (RIFF WAVE format)
WinExcel1	8	Microsoft Excel 1.x file (.xls)
WinWord1&2	7	Microsoft Word (1.x and 2.x) file
WinWrite	9	Microsoft Write file
XaraFile	58	XaraX graphic file
ZipFile	10	Compressed file created by PKZip
ZOOfile	19	Compressed file created by ZOO