File types
Any type of file can be attached to an email, including .exe program files. Look for the common warning signs so you can avoid viruses, Trojans, Worms and other types of malware.
Do not open or download files with file extensions that do not look familiar to you. For example, if you don’t usually receive .dot files, then you should be cautious when you see one in your email. It is especially important to remember when you don’t recognize or trust the sender, or when you’re not expecting to receive an attachment.
Be exceptionally cautious of files with double extensions, such as reports.pdf.exe. The only extension that matters is the last one. In this example, EXE represents an executable file that will run when you download. Files with double extensions are almost always dangerous.
Be vigilant in what you open!
Potentially dangerous file types
- .exe - Executable. This is the most dangerous and common attachment type. In a recent article, it was mentioned "think of it as possibly executing your PC!"
- .com - Another executable. Indicates command files
- .bat - Batch file. This runs a process when opened.
- .vbs - VBScript file. These attachments automatically execute.
- .scr - Screen Saver file. Can contain malicious code.
- .pif - Performs text based command line functions in MS Dos
- .doc or .docx - Microsoft Word, Wordpad. Only harmful if they contain macros
- .xls or .xlsx - Excel spreadsheet data. Only harmful if they contain macros
- .ppt or .pptx - PowerPoint Presentation. Only harmful if they contain macros
- .zip - compressed file storage
Commonly safe e-mail attachments
- .jpg or .jpeg - Picture file (Joint Pictures Expert Group)
- .gif - Picture File (Graphics Interchange Format). Pictures can be animated
- .mpg or .mpeg - Movie clip (Motion Picture Expert Group)
- .bmp - Bitmap. Picture file
- .txt - ASCII Text file
- .pdf - Portable Document Format. Can be read by Adobe Acrobat Reader
Note: A PDF can still be dangerous, if you are not expecting it, always double check.