Share via


Appendix E - File types list overview

 

Applies to: Microsoft Antigen

This is a list of the file types that are used when creating file filters to detect files based solely on their content type. The program log number is reported in the Antigen program log when the associated file type is identified by a virus scanner or a file filter. For more information about detecting files by type, see “Filtering by file type” in Chapter 12 - Using file filtering.

Note

When a Microsoft® Office file (a PowerPoint®, Access, Excel®, or Word document) is embedded in another Office file, its data is included as part of the original Office file. These files are not scanned as individual files. However, if another file type (such as .exe) is embedded in one of these files and that file is subsequently embedded in an Office file, it will be detected and scanned as a separate file. (The .exe extension, however, is still visible because the icon is a GIF file that cannot be deleted. If you click on the file, the icon will be replaced with the correct TXT icon.)

File type Program log number Description

ANIFILE

66

Windows® 95 animated cursor file.

ARCFILE

21

ARC compression format file.

ARJFILE

20

ARJ compression format file.

AUTOCAD

63

AutoCad file.

AVIFILE

29

Windows Audio/Visual file format (Audio/Video Interleaved resource interchange file format).

BMPFILE

24

Bitmap image file.

DATAZFILE

15

InstallShield file (InstallShield 3).

DOCFILE

6

Microsoft OLE Structured Storage file.

The DOCFILE test checks for the OLE Structured Storage file format. Contained within this format is information that describes the application to use to process the data. Among the applications that use this format are those in the Microsoft Office suite: Word (.doc), Excel (.xls), PowerPoint (.ppt), Exchange Message files (.msg), and Shell scraps (.shs).

EICAR

5

Eicar test virus file.

EPSFILE

57

Encapsulated PostScript file (Adobe).

EXEFILE

3

Microsoft executable file.

FONT_TYPE1

64

Adobe Type 1 font file.

GIFFILE

22

GIF image file.

GZIPFILE

16

GZip compression format file.

HYPERARC

54

ARC compression format file (Systems Enhancement Associates).

ICOFILE

27

Windows icon file.

IS_UNINST

48

InstallShield uninstall file.

ISCABFILE

14

Microsoft cabinet archive format file.

JARFILE

52

Java archive file.

JAVACLASS

45

Java byte code file (usually contained inside a JAR file).

JPEG

23

JPEG image file.

LHAFILE

12

Compression format file (LHA/LHARC).

MACFILE

77

A binary (nontext) format that encodes Macintosh files so that they can be safely stored or transferred through non-Macintosh systems.

MDB

71

Access database file.

MP3FILE

67

MP3 audio file.

MPEG1

32

MPEG animation file (.mpg).

MS_CHIFILE

51

Document file for Microsoft Help index (.chi).

MS_HELP

50

Microsoft Help file (.hlp).

MS_TYPELIB

49

Microsoft Type Library file format (typically used for Microsoft ActiveX® service).

MS_WMF

59

Windows metafile format graphics (vectored and bit-mapped).

MSCABFILE

13

Cabinet file (Microsoft installation. archive).

MSCOMPRESS

17/18

Microsoft compression format file.

MSIMC_MIME

46

MIME formatted text file with IMC binary header.

MSLIBRARY

42

Microsoft object code library file.

MSSHORTCUT

44

Microsoft shortcut file (.lnk).

NOTESDB

68

Notes database file.

OBJFILE

43

Object code file (Intel Relocatable Object Module - .obj).

OPENXML

83

OpenXML file.

This file type applies to Office Word, PowerPoint, and Excel 2007 files only. The Scan Doc Files As Containers settings in General Options (for Manual, Internet, and Realtime scan jobs) do not apply to Office 2007 files because these are always scanned as containers. Although OpenXML files are essentially ZIP containers and the individual files inside are scanned by Antigen, settings that affect ZIP files do not apply to them. OpenXML documents have an XML-based schema that Antigen cannot modify if an infection is found. Therefore, if an infection is in a file that is part of the XML schema, the file is not cleaned and the entire OpenXML document is deleted. However, if the infected file is not part of the XML schema, then Antigen will attempt to clean just that infected file (replacing it with the Deletion Text) and leave the rest of the OpenXML document intact. If it cannot be cleaned, just that file will be deleted. However, in practice, Office 2007 does not open any OpenXML file containing files that are not part of the XML schema.

PALFILE

26

Adobe PageMaker library palette file or a color palette file.

PCXFILE

25

Bitmap graphic file (PC Paintbrush).

PDFFILE

47

Portable Document Format file (Adobe).

PIFFILE

4

Program Information File (Windows), or Vector Graphics GDF format file (IBM mainframe computers).

PKLITE

55

PKLite compression format file.

PNGFILE

61

Bitmap graphics file (Portable Network Graphics).

QTMovie

31

QuickTime movie file.

RARFILE

76

RAR-compressed archive file.

RIFFILE

30

RIFF bitmap graphics file (Fractal Design Painter).

SFXEXE

73

Self-extracting executable file.

TARFILE

75

TAR archive format file (a UNIX method of archiving files that can also be used on personal computers). TAR archives files but does not compress them, so .tar files are compressed with other tools; this produces extensions such as .tar.gz, .tar.Z, and .tgz.

TEXT

1

Text file (.txt).

TIFFILE

62

Tagged Image File Format (TIFF) bitmap graphics file.

TNEFFILE

56

Microsoft Transport Neutral Encapsulation Format file (Message file).

TRUETYPE

65

Microsoft TrueType font file (.ttf).

UNICODE

2

Universal Character Code double-byte text file.

UNIXCOMPRS

53

Unix Compressed format file.

VISIO_WMF

60

Visio exported meta file.

WAVFILE

28

Waveform audio file (RIFF WAVE format).

WINEXCEL1

8

Microsoft Excel 1.x file (.xls).

WINWORD1&2

7

Microsoft Word (1.x and 2.x) file.

WINWRITE

9

Microsoft Write file.

XARAFILE

58

XaraX graphic file.

ZIPFILE

10

Compressed file created by PKZip.

ZOOFILE

19

Compressed file created by ZOO.

Appendix D - Using the Antigen diagnostic utility

Appendix F - Using multiple disclaimers