User Guide

User’s Guide 271
Default Vulnerable and Compressed File Extensions
.SYS Program DOS or Windows system files and device
drivers. These executable files frequently start
along with or as part of program execution.
.TAR Archive UNIX tape archive files.
.VBS Script Visual Basic script files and VBScript files.
VBScript is an implementation of the Microsoft
Visual Basic programming language. It powers
special features on many web pages, and can
directly manipulate many functions inside
Microsoft Outlook and other software.
.VS? Macro Visio drawing and related files. Later Visio
versions include infectable scripting extensions.
.VXD Program Windows virtual device drivers. These are
executable fiels that often reside in memory.
.WBK Macro Microsoft Word backup files
.WPD Macro Corel WordPerfect document files.
.XL? Macro Microsoft Excel worksheet, add-in, toolbar,
chart, dialog box, backup, macro, workspace,
Visual Basic module, and template files. These
files can contain infectable Visual Basic for
Applications macros.
.XML Script/macro Extensible Markup Language files. Although
they are nominally plain text, these files can
contain powerful scripting functions that act
through browser software.
.ZIP Archive WinZip and PKZip compressed archive files.
Table 10-1. Vulnerable file name extensions
Extension File Type File Description