McAfee AVDCDE-AA-AA User Guide - Page 289

Table 9-1. Vulnerable file name extensions, Extension, File Type, File Description

Page 289 highlights

Default Vulnerable and Compressed File Extensions Table 9-1. Vulnerable file name extensions Extension .COM .CSC .DL? .DOC .DOT .EXE .GMS .GZ? .HLP .HT? .ICE .IM? .INI .JS? .LZH File Type Program Script/macro Program Macro Macro Program Macro Compressed Macro Script/macro Compressed Program Program Script Compressed File Description Command/binary image files. These common files run as infectable executable programs. DOS and Windows system files frequently make use of this extension. Corel script files. Script files can include viruses or generate macro viruses. Dynamic Link Library file; C++ dialog script files. Dynamic Link Library files are resource files linked to executable program files. Executable files can load viruses stored in them and run them as part of their native code. Microsoft Word document files. These files can contain Word Basic macros and, therefore, macro viruses Microsoft Word document template files. These files can contain Word Basic macros and macro viruses Executable files. Most software uses this extension to identify files that start its command shell or program kernel. Corel Global Macro Storage files. UNIX GNU Gzip compressed files. Windows Help files. These files can contain executable Word Basic or other macro code. Hyper Text Markup Language and related files; Microsoft Hyper Text template files. Although they are nominally plain text, these files can contain powerful scripting functions that act through browser software ICE compressed files. Image files for creating disk images. Windows initialization files. Although these are generally text files, infected .INI files can cause mIRC clients to perform unwanted actions. JavaScript source files. JavaScript files can contain virus code that acts directly on web browsers. LHARC compressed files User's Guide 289

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344

User
s Guide
289
Default Vulnerable and Compressed File Extensions
.COM
Program
Command/binary image files. These common
files run as infectable executable programs.
DOS and Windows system files frequently make
use of this extension.
.CSC
Script/macro
Corel script files. Script files can include viruses
or generate macro viruses.
.DL?
Program
Dynamic Link Library file; C++ dialog script files.
Dynamic Link Library files are resource files
linked to executable program files. Executable
files can load viruses stored in them and run
them as part of their native code.
.DOC
Macro
Microsoft Word document files. These files can
contain Word Basic macros and, therefore,
macro viruses
.DOT
Macro
Microsoft Word document template files. These
files can contain Word Basic macros and macro
viruses
.EXE
Program
Executable files. Most software uses this
extension to identify files that start its command
shell or program kernel.
.GMS
Macro
Corel Global Macro Storage files.
.GZ?
Compressed
UNIX GNU Gzip compressed files.
.HLP
Macro
Windows Help files. These files can contain
executable Word Basic or other macro code.
.HT?
Script/macro
Hyper Text Markup Language and related files;
Microsoft Hyper Text template files. Although
they are nominally plain text, these files can
contain powerful scripting functions that act
through browser software
.ICE
Compressed
ICE compressed files.
.IM?
Program
Image files for creating disk images.
.INI
Program
Windows initialization files. Although these are
generally text files, infected .INI files can cause
mIRC clients to perform unwanted actions.
.JS?
Script
JavaScript source files. JavaScript files can
contain virus code that acts directly on web
browsers.
.LZH
Compressed
LHARC compressed files
Table 9-1. Vulnerable file name extensions
Extension
File Type
File Description