FSOCS file types list

  • Article

 

Applies to: Forefront Security for Office Communications Server

This is a list of the file types that are used when creating file filters in order to detect files, based solely on their content type. The program log number is reported in the Microsoft Forefront Security for Office Communications Server (FSOCS) program log when the associated file type is identified by a virus scanner or a file filter. For more information about detecting files by type, see "Filtering by file type" in FSOCS file filtering.

Note

When a Microsoft Office file (PowerPoint, Access®, Excel, or Word document) is embedded in another Office file, its data is included as part of the original Office file. These are not scanned as individual files. If, however, another file type (such as .exe) is embedded in one of these files that is then embedded in an Office file, it will be detected and scanned as a separate file. (The .exe extension, however, is still visible because the icon is a GIF file that cannot be deleted. If you click the file, the icon is replaced with the correct TXT icon.)

File type Program log number Description

ANIfile

66

Microsoft Windows 95 animated cursor file

ARCfile

21

Advanced RISC computing (ARC) compression format file

ARJfile

20

ARJ compression format file

AutoCad

63

AutoCad file

AVIfile

29

Windows Audio/Visual file format (Audio/Video Interleaved resource interchange file format)

BMPfile

24

Bitmap image file

DataZfile

15

InstallShield file (InstallShield 3)

Docfile

6

Microsoft OLE Structured Storage file

The Docfile test checks for the OLE Structured Storage file format. Contained within this format is information that describes the application to use in order to process the data. Among the applications that use this format are the Microsoft Office applications suite: Word (.doc), Excel (.xls), PowerPoint (.ppt), Exchange Message files (.msg), and Shell scraps (.shs).

Eicar

5

Eicar test virus file

EPSfile

57

Encapsulated PostScript file (Adobe)

EXE

3

Microsoft executable file

Font_Type1

64

Adobe Type 1 font file

GifFile

22

GIF image file

GZipFile

16

GZip compression format file

HyperArc

54

ARC compression format file (Systems Enhancement Associates)

ICOfile

27

Windows icon file

IS_Uninst

48

InstallShield uninstall file

ISCABfile

14

Microsoft cabinet archive format file

JarFile

52

Java archive file

JavaClass

45

Java byte code file (usually contained inside a JAR file)

JPEG

23

JPEG image file

LHAfile

12

Compression format file (LHA/LHARC)

MACFILE

77

A binary (non-text) format that encodes Macintosh files so that they can be safely stored or transferred through non-Macintosh systems

MDB

71

Access database file

MP3File

67

MP3 audio file

MPEG1

32

MPEG animation file (.mpg)

MS_Chifile

51

Document file for Microsoft Help index (.chi)

MS_Help

50

Microsoft Help file (.hlp)

MS_TypeLib

49

Microsoft Type Library file format (typically used for ActiveX® service)

MS_WMF

59

Microsoft Windows metafile format graphics (vectored and bit-mapped)

MSCabFile

13

Cabinet file (Microsoft installation archive)

MSCompress

17/18

Microsoft compression format file

MSIMC_MIME

46

MIME formatted text file with IMC binary header

MSLibrary

42

Microsoft object code library file

MSShortCut

44

Microsoft shortcut file (.lnk)

NotesDB

68

Notes database file

OBJfile

43

Object code file (Intel Relocatable Object Module - .obj).

OPENXML

83

OPENXML file

Note: This file type applies to Word, PowerPoint, and Excel 2007 files only. Although OpenXML files are essentially ZIP containers, and the individual files inside are scanned by FSOCS, settings that affect ZIP files do not apply to them. OpenXML documents have an XML-based schema, which FSOCS cannot modify if an infection is found. Therefore, if an infection is in a file that is part of the XML schema, the file is not cleaned, and the entire OpenXML document is deleted. However, if the infected file is not part of the XML schema, then FSOCS attempts to clean just that infected file (replacing it with the deletion text) and leave the rest of the OpenXML document intact; if it cannot be cleaned, just that file is deleted. However, in practice, Office 2007 does not open any OpenXML file containing files that are not part of the XML schema.

PALfile

26

Adobe PageMaker library palette file or a color palette file

PCXfile

25

Bitmap graphic file (PC Paintbrush)

PDFfile

47

Portable Document Format file (Adobe)

PIFfile

4

Program Information File (Windows), or Vector Graphics GDF format file (IBM mainframe computers)

PKLite

55

PKLite compression format file

PNGfile

61

Bitmap graphics file (Portable Network Graphics)

QTMovie

31

QuickTime Movie file

RARFILE

76

RAR-compressed archive file

RIFfile

30

RIFF bitmap graphics file (Fractal Design Painter)

SFXexe

73

Self-extracting executable file

TARFILE

75

TAR archive format file (a UNIX method of archiving files, which can also be used by personal computers). TAR archives files but does not compress them, so sometimes .tar files are compressed with other tools, which produces extensions like .tar.gz, .tar.Z, and .tgz.

Text

1

Text file (.txt)

TifFile

62

Tagged Image File Format (TIFF) bitmap graphics file

TNEFfile

56

Microsoft Transport Neutral Encapsulation Format file (Message file)

TrueType

65

Microsoft TrueType font file (.ttf)

Unicode

2

Universal Character Code double-byte text file

UnixComprs

53

Unix Compressed format file

Visio_WMF

60

Visio exported meta file

WavFile

28

Waveform audio file (RIFF WAVE format)

WinExcel1

8

Microsoft Excel 1.x file (.xls)

WinWord1&2

7

Microsoft Word (1.x and 2.x) file

WinWrite

9

Microsoft Write file

XaraFile

58

XaraX graphic file

ZipFile

10

Compressed file created by PKZip

ZOOfile

19

Compressed file created by ZOO