Specify file extensions for on-demand and scheduled scanning

If you use role-based administration:

You must have the Policy setting - anti-virus and HIPS right to perform this task.
You cannot edit a policy if it is applied outside your active sub-estate.

You can specify which file extensions are scanned during on-demand and scheduled scanning.

Check which anti-virus and HIPS policy is used by the group(s) of computers you want to configure.
See Check which policies a group uses.
In the Policies pane, double-click Anti-virus and HIPS.
Double-click the policy you want to change.
The Anti-Virus and HIPS Policy dialog box is displayed.
In the On-demand scanning panel, click Configure.
The On-demand scan settings dialog box is displayed.

On the Extensions tab, configure the options as described below.

Option	Description
Scan all files	Scan all files regardless of the filename extension. If you turn on this option, the other options on the Extensions tab are turned off. Scanning all files will affect computer performance, so we recommend that you only turn on this option as part of a weekly scheduled scan.
Scan only executable and other vulnerable files	Check all files with executable file extensions (for example, .exe, .bat, .pif) or files that have the possibility of being infected (for example, .doc, .chm, .pdf). Quickly check the structure of all files, and then scan them if their format is that of an executable file.
Additional file type extensions to be scanned	To scan additional file types, click Add, and then type a file extension such as `PDF` in the Extension box. You can use the wildcard ? to match any single character. To stop scanning a file type, select its extension in the list, and then click Remove. To change a file type, select its extension in the list, and then click Edit.
Scan files with no extension	Files with no extension could be malware, so we recommend that you leave this option turned on.
Exclude	To exclude specific file types from scheduled scanning, click Add, and then type a file extension such as `PDF` in the Extension box. To start scanning a file type, select its extension in the list, and then click Remove. To change a file type, select its extension in the list, and then click Rename.

For detailed advice about configuring the extension settings for scheduled scanning, see Sophos knowledgebase article 63985.