FSOCS file types list
Applies to: Forefront Security for Office Communications Server
This is a list of the file types that are used when creating file filters in order to detect files, based solely on their content type. The program log number is reported in the Microsoft Forefront Security for Office Communications Server (FSOCS) program log when the associated file type is identified by a virus scanner or a file filter. For more information about detecting files by type, see "Filtering by file type" in FSOCS file filtering.
Note
When a Microsoft Office file (PowerPoint, Access®, Excel, or Word document) is embedded in another Office file, its data is included as part of the original Office file. These are not scanned as individual files. If, however, another file type (such as .exe) is embedded in one of these files that is then embedded in an Office file, it will be detected and scanned as a separate file. (The .exe extension, however, is still visible because the icon is a GIF file that cannot be deleted. If you click the file, the icon is replaced with the correct TXT icon.)
| File type | Program log number | Description |
|---|---|---|
ANIfile |
66 |
Microsoft Windows 95 animated cursor file |
ARCfile |
21 |
Advanced RISC computing (ARC) compression format file |
ARJfile |
20 |
ARJ compression format file |
AutoCad |
63 |
AutoCad file |
AVIfile |
29 |
Windows Audio/Visual file format (Audio/Video Interleaved resource interchange file format) |
BMPfile |
24 |
Bitmap image file |
DataZfile |
15 |
InstallShield file (InstallShield 3) |
Docfile |
6 |
Microsoft OLE Structured Storage file The Docfile test checks for the OLE Structured Storage file format. Contained within this format is information that describes the application to use in order to process the data. Among the applications that use this format are the Microsoft Office applications suite: Word (.doc), Excel (.xls), PowerPoint (.ppt), Exchange Message files (.msg), and Shell scraps (.shs). |
Eicar |
5 |
Eicar test virus file |
EPSfile |
57 |
Encapsulated PostScript file (Adobe) |
EXE |
3 |
Microsoft executable file |
Font_Type1 |
64 |
Adobe Type 1 font file |
GifFile |
22 |
GIF image file |
GZipFile |
16 |
GZip compression format file |
HyperArc |
54 |
ARC compression format file (Systems Enhancement Associates) |
ICOfile |
27 |
Windows icon file |
IS_Uninst |
48 |
InstallShield uninstall file |
ISCABfile |
14 |
Microsoft cabinet archive format file |
JarFile |
52 |
Java archive file |
JavaClass |
45 |
Java byte code file (usually contained inside a JAR file) |
JPEG |
23 |
JPEG image file |
LHAfile |
12 |
Compression format file (LHA/LHARC) |
MACFILE |
77 |
A binary (non-text) format that encodes Macintosh files so that they can be safely stored or transferred through non-Macintosh systems |
MDB |
71 |
Access database file |
MP3File |
67 |
MP3 audio file |
MPEG1 |
32 |
MPEG animation file (.mpg) |
MS_Chifile |
51 |
Document file for Microsoft Help index (.chi) |
MS_Help |
50 |
Microsoft Help file (.hlp) |
MS_TypeLib |
49 |
Microsoft Type Library file format (typically used for ActiveX® service) |
MS_WMF |
59 |
Microsoft Windows metafile format graphics (vectored and bit-mapped) |
MSCabFile |
13 |
Cabinet file (Microsoft installation archive) |
MSCompress |
17/18 |
Microsoft compression format file |
MSIMC_MIME |
46 |
MIME formatted text file with IMC binary header |
MSLibrary |
42 |
Microsoft object code library file |
MSShortCut |
44 |
Microsoft shortcut file (.lnk) |
NotesDB |
68 |
Notes database file |
OBJfile |
43 |
Object code file (Intel Relocatable Object Module - .obj). |
OPENXML |
83 |
OPENXML file Note: This file type applies to Word, PowerPoint, and Excel 2007 files only. Although OpenXML files are essentially ZIP containers, and the individual files inside are scanned by FSOCS, settings that affect ZIP files do not apply to them. OpenXML documents have an XML-based schema, which FSOCS cannot modify if an infection is found. Therefore, if an infection is in a file that is part of the XML schema, the file is not cleaned, and the entire OpenXML document is deleted. However, if the infected file is not part of the XML schema, then FSOCS attempts to clean just that infected file (replacing it with the deletion text) and leave the rest of the OpenXML document intact; if it cannot be cleaned, just that file is deleted. However, in practice, Office 2007 does not open any OpenXML file containing files that are not part of the XML schema. |
PALfile |
26 |
Adobe PageMaker library palette file or a color palette file |
PCXfile |
25 |
Bitmap graphic file (PC Paintbrush) |
PDFfile |
47 |
Portable Document Format file (Adobe) |
PIFfile |
4 |
Program Information File (Windows), or Vector Graphics GDF format file (IBM mainframe computers) |
PKLite |
55 |
PKLite compression format file |
PNGfile |
61 |
Bitmap graphics file (Portable Network Graphics) |
QTMovie |
31 |
QuickTime Movie file |
RARFILE |
76 |
RAR-compressed archive file |
RIFfile |
30 |
RIFF bitmap graphics file (Fractal Design Painter) |
SFXexe |
73 |
Self-extracting executable file |
TARFILE |
75 |
TAR archive format file (a UNIX method of archiving files, which can also be used by personal computers). TAR archives files but does not compress them, so sometimes .tar files are compressed with other tools, which produces extensions like .tar.gz, .tar.Z, and .tgz. |
Text |
1 |
Text file (.txt) |
TifFile |
62 |
Tagged Image File Format (TIFF) bitmap graphics file |
TNEFfile |
56 |
Microsoft Transport Neutral Encapsulation Format file (Message file) |
TrueType |
65 |
Microsoft TrueType font file (.ttf) |
Unicode |
2 |
Universal Character Code double-byte text file |
UnixComprs |
53 |
Unix Compressed format file |
Visio_WMF |
60 |
Visio exported meta file |
WavFile |
28 |
Waveform audio file (RIFF WAVE format) |
WinExcel1 |
8 |
Microsoft Excel 1.x file (.xls) |
WinWord1&2 |
7 |
Microsoft Word (1.x and 2.x) file |
WinWrite |
9 |
Microsoft Write file |
XaraFile |
58 |
XaraX graphic file |
ZipFile |
10 |
Compressed file created by PKZip |
ZOOfile |
19 |
Compressed file created by ZOO |