What are CLSID or PIF files and how does MailMarshal handle these files?


This article applies to:

  • Trustwave MailMarshal (SEG)

Question:

What are CLSID files and how does MailMarshal handle these files?

Information:

CLSID or PIF files are a class of file that has an extension hidden in Windows even when the option to show all files and extensions is set. This extension is .pif. Although this format is deprecated, it may still be used by programs like Access and Power Point.

Files with the extension .PIF may also be executed by some versions of Windows regardless of the actual structure of the file.

MailMarshal will detect any other executable masquerading with the .pif extension, using the standard File Type feature. MailMarshal also blocks files with the .pif extension by default.

This article was previously published as:
NETIQKB29389
Marshal KB257

Last Modified 6/8/2020.
https://support.trustwave.com/kb/KnowledgebaseArticle10809.aspx