RealTime Protector for Windows NT/2000/XP is set to scan by content and extension. This means that RealTime Protector will scan all files of such type that it could possibly contain malicious code which can be executed by opening the file.
The following extensions are scanned:
EXE, COM, SYS, VXD, DLL, DRV, SCR, 386, XL?, DOC, DOT, OV?, CPL, FON, TSK, ACM,
ACV, TLB, TSP, OCX, VBX, OBJ, SHS, CLA, VOM, VXE, MDB, TD0, BAT, BTM, INI, INF,
HT?, VBS, SMM, RTF, MPP, MPT, PPA, PPS, PPT, POT, WBK, PWZ, MSO, GMS, CSC, HLP,
WPD, WK?, DVB, WBT, OBD, OBT, OBZ, CDR, MSG, EML, OFT, HTA, CHM, XML, QPW, VBE,
JSE, CSS, SHB, PIF, WSC, PRC, PHP, VSD, VSS, VST, PL ,JS ,SH
Remember that the scanner also scans by contents, ie. EXE file renamed to something else should be scanned.
RealTime Protector can be disabled, which means he will stop scanning. This option is to be used: