Dangerous and malicious file extension list
Group of file extensions, which can be dangerous and harmful for your computer, but it may be also a regular program or data files. You should run a virus scan before opening any unknown file type from this group.
Malicious software, also known as malware, is an application or a file, which is harmful to the computer user. Malicious software includes computer viruses, worms, trojan horses, spyware, adware or rootkits.
Computer virus - virus is a program or programming code, which replicates by being copied or initiating its copying to another program, computer boot sector or document. Viruses can be transmitted as attachments to an e-mail note or in a downloaded file, or can be present on a diskette or CD. Some viruses wreak their effect as soon as their code is executed, other lie dormant until circumstances cause their code to be executed by the computer.
Computer worm - worm is a self-replicating virus, which does not alter files, but resides in active memory and duplicates itself. Worms use parts of the operating system that are automatic and usually invisible to the user. It is common for worms to be noticed only after their uncontrolled replication consumes system resources, slowing or halting other tasks.
Trojan horses - trojan horse (also known as trojan), is non-self-replicating malware, which appears to perform a desirable function for the user, while facilitates unauthorized access to the user's computer system.
Spyware - spyware is any technology, which aids in gathering information about a person or organization without their knowledge. Spyware is a program that is installed in someone's computer to secretly gather information about the user and to relay it to advertisers or other interested parties. Spyware can get in the computer as a software virus or as the result of installing a new program.
Adware - adware is any software package, which automatically plays, displays or downloads advertisements to the computer after the software is installed on it or while the application is being used.
Rootkits - rootkit is a collection of programs that enable administrator-level access to a computer or computer network. Typically, a cracker installs a rootkit on a computer after first obtaining user-level access, either by exploiting a known vulnerability or cracking the password. Once the rootkit is installed, it allows the attacker to mask intrusion and gain root or privileged access to the computer and possibly also to other machines in the network.
Extension
| File type description |
| Windows virtual device driver |
file extension aru | Autorun.aru malicious file |
| Troj/ProAgent-A |
file extension aut | Malware AutoStartup file |
| Batch file (executable) |
| CD/DVD binary image file |
file extension bkd | Book Library Local Dos exploit file |
file extension blf | Beast Trojan File |
file extension bll | VBS/European-A worm file |
file extension bmw | W32/Liji-A virus file |
file extension boo | Microsoft Booasm.arc encoded file archive |
file extension bqf | Backdoor.Win32.Ciadoor.bqf trojan file |
file extension buk | Malicious file |
file extension bxz | itaup.bxz malware file |
file extension ce0 | Winewar worm file |
file extension ceo | Winewar worm file |
file extension cfxxe | Possibly Malware file |
| Microsoft compiled HTML help file |
file extension cih | Chernobyl virus file |
| Java Class file |
| Java bytecode class file |
| Windows command script file |
file extension cnm | Microsoft Windows application menu options and setup file |
| Command executable file |
| Microsoft Windows Control Panel file |
file extension cxq | SillyDl.CXQ downloading trojan file |
file extension cyw | Rbot.CYW worm file |
file extension dbd | DemoShield project file |
| Windows Device Driver file |
file extension dlb | Troj/Dloadr-AHT file |
file extension dli | Win32.Sober.AD@mm file |
| Dynamic Link Library file |
file extension dllx | Backdoor.Bot file |
file extension dom | DomPlayer malicious file |
| Microsoft Windows device driver |
file extension dx | Win32/Alureon file |
file extension dxz | Trojan backdoor virus file |
file extension dyv | WORM_AUTORUN.DYV Worm file |
file extension dyz | Backdoor.Win32.ProRat.dyz trojan file |
| Email message file |
| Program executable file |
file extension exe1 | Renamed executable file |
file extensionexe_renamed | Renamed EXE file |
file extension ezt | Worm.Win32.AutoRun.ezt file |
file extension *** | Win32.AutoRun.*** |
file extension fjl | Rootkit.Win32.Agent.fjl virus file |
file extension fnr | Trojan-Dropper.Win32.Flystud.lc. file |
file extension fuj | Worm.Win32.AutoRun.fuj virus file |
| Graphics interchange file format |
| Help file |
file extension hlw | win32/AMalum.EDHZ file |
file extension hsq | Qaz Trojan data file |
file extension hts | Troj/DelSpy-E file |
| Text configuration file |
file extension iva | Dementia.4207 virus file |
file extension iws | Trojan-Downloader.JS.Agent file |
| JavaScript file |
file extension kcd | rshiphop.kcd malware file |
file extension lik | Trojan.Win32.Agent.lik file |
file extension lkh | Worm.Generic.LKH virus file |
| Windows Shortcut file |
file extension lok | W32/Rbot-WE log file |
file extension mfu | Backdoor.Win32.Agent.mfu virus file |
file extension mjz | Trojan.Win32.Agent.mjz file |
file extension oar | HSQLDB database file |
| ActiveX control file |
file extension osa | W32/Sober-AD file |
file extension ozd | Win32.TrojanDownloader.Agent.OZD trojan |
| Paintbrush bitmap image |
| Portable graymap file format |
| PHP version 2 script (HyperText PreProcessor) |
| PHP version 3 script file |
file extension pid | W32/Yayin-A worm data file |
| Microsoft Windows Program Information File |
file extension plc | Lotus add-in functions macros applications |
| Portable Network Graphic file |
file extension pr | W32/Brontok-DP worm file |
file extension qit | Backdoor.QIT trojan horse file |
file extension rhk | Backdoor.Win32.Rbot.rhk trojan virus file |
file extension rna | Malware file |
file extension rsc_tmp | Temporary file |
file extension s7p | SubSeven trojan file |
| Microsoft Windows screensaver file |
file extension scr | Script file |
| Microsoft Windows Shell Scrap Object file |
file extension ska | Happy99 virus file |
file extension smm | Ami Pro macro file |
file extension smtmp | Trojan:Win32/FakeSysdef folder |
file extension sop | Malware word.sop file |
file extension spam | Spam e-mail message |
file extension ssy | W32/Sober-AD file |
| ShockWave Flash, Animated vector format for the Internet |
file extension sys | System file |
| Aldus Tagged Image File Format (TIFF) bitmap image |
file extension tko | Win32/Oficla malware file |
file extension tps | Scam torrent file |
file extension tsa | jnana.tsa malware file |
file extension tti | Beast Trojan file |
file extension txs | Beast Trojan file |
file extension upa | Fake download file |
file extension uzy | Backdoor.Sokacaps file |
| Microsoft Visual Studio Visual Basic script file |
| Visual Basic VBA module file |
| Microsoft Visual Basic encoded script file |
| Visual Basic for applications script file |
| Microsoft Visual Basic Extension file |
file extension vexe | Infected executable file |
| Microsoft Visio diagram document file |
| Microsoft Windows virtual device driver |
file extension vzr | Sinowal.vzr malware file |
file extension wlpginstall | Possible Malware file |
| Windows metafile format |
| Microsoft Windows script file |
| Microsoft Windows scripting component file |
| Microsoft Windows scripting file |
| Microsoft Windows Scripting Host file |
| Microsoft Windows Sound System file |
file extension xdu | Backdoor.Win32.PcClient.xdu file |
file extension xir | BackDoor.Generic9.XIR trojan file |
| Microsoft Excel Macro file |
| Microsoft Excel VBA module file |
file extension xnt | W32/Sober-AD file |
| WinZix compressed archive file |
file extension zvz | Malware file |
Source: http://www.file-extensions.org/filetype/extension/name/dangerous-malicious-files
Last edited by a moderator: