Ask a questionAsk a question
 

AnswerFile Types List - .msi extension

  • Tuesday, August 19, 2008 12:40 PMMinniti Sergio Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    HI,
    I'd like quarantine all .msi files using  a "Filtering by File Type" file filter. To reading the file types list (http://technet.microsoft.com/en-us/library/bb795074.aspx) I've found a lot of extension but nothing about .msi
    There are DataZfile and IS_Uninst file types that could have something of similar with msi extension but I don't know their right meaning.
    Moreover, the KB article speaks about "The program log number is reported in the Forefront Security for Exchange Server program log when the associated file type is identified by a virus scanner or a file filter" but I haven't found nothing of it in the FSE program log. How is it possible?
    I wait for someone support, thanks.

    Sergio

Answers

  • Tuesday, August 19, 2008 7:15 PMRob - MSFT Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Hi,


    I apologize about my assumption.


    After some additonal research...

    MSI files are OLE Storage types.

    Try testing this with using File Types = DOC - Microsoft Word document.

    The fact that they are seen as doc. files may alter your action plan in scanning for them using File Types.

    Thanks again.
    Rob M

All Replies

  • Tuesday, August 19, 2008 1:36 PMRob - MSFT Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi,

    Please choose EXE - Microsoft Executable File from the File Types list.

    An MSI file should be seen as containing executable code.

    Please make sure you File Filter is then enabled and you have chosen the appropriate Action.

    Thank You,
    Rob
    Rob M
  • Tuesday, August 19, 2008 2:20 PMMinniti Sergio Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    HI Rob,
    Thank you for  your quick reply, but EXE file type is already enabled and .msi attachments are received in inbox folder nowadays. File filter is already enabled for other types of extension. Have you any idea?
    Thanks,

    Sergio
  • Tuesday, August 19, 2008 7:15 PMRob - MSFT Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Hi,


    I apologize about my assumption.


    After some additonal research...

    MSI files are OLE Storage types.

    Try testing this with using File Types = DOC - Microsoft Word document.

    The fact that they are seen as doc. files may alter your action plan in scanning for them using File Types.

    Thanks again.
    Rob M
  • Friday, October 30, 2009 2:51 PMMartin Necas Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hallo,

    I am interrested in similiar issue, how can I identify, in which file type some file belongs to ? (For example .WMZ, .FPT, ...)

    In the Forefront's help, there is such statement: "The program log number is reported in the Forefront Security for Exchange Server program log when the associated file type is identified by a virus scanner or a file filter."

    I can not find the "program log number" in any Forefront's log.

    Thanks for helping in advance.