The GD scanner is comprised of a CPU emulator, a virus signature scanner, and an emulation control module (ECM).
The antivirus program would open each executable file on the computer and scan its entire contents for a current set of virus signatures.
After all, scanning for hundreds of virus signatures through hundreds of kilobytes of executable programs was a very slow process, especially on 4.
Search the bytes at location E for virus signatures.
In the past, we could detect viruses by searching for virus signatures extracted from the virus body.