You can configure the PHP File Change Scanner from the Malware Detection page, clicking on the Scanner Preferences button.
Scanner preferences
When this option is enabled, Admin Tools will calculate a diff (compact form of file differences) for each modified file detected by the PHP File Scanner feature. This is useful if you want to pinpoint the changes made to a file.
Please note that this consumes a lot of database space, about 20-40Mb for a typical site.
The scan results will be automatically sent to this email address. If you leave it blank no email will be sent.
When enabled (default) the PHP File Change Scanner will send you an email with the scan results summary only when actionable items (added, modified or suspicious files) are detected.
Enter file extensions to be scanned by the PHP File Change Scanner. One extension per line, without the leading dot. Please only include extensions of file types you expect to contain PHP executable code. Don't add non-PHP files such as .exe or .docx; that would slow down the scanner without increasing your security. Remember that the PHP File Change Scanner is designed to scan PHP files; it's not a generic antivirus, it's useless against malicious macros, traditional viruses in EXE files etc.
List of folders which are going to be ignored while the PHP File Change Scanner is scanning your site. One directory per line. Always use forward slashes, even on Windows. Paths must be relative to your site's root folder. Example:
wp-content/plugins/myplugin/somefolder
List of files which are going to be ignored while the PHP File Change Scanner is scanning your site. One file per line. Always use forward slashes, even on Windows. Paths must be relative to your site's root folder. Example:
wp-content/plugins/someplugin/file.php
Set to Yes to enable scheduling this feature with the Scheduling URL method.
The Secret Word to control access to the Scheduling URL method. Only applies when the Frontend option above is set to Yes.