If Offset is selected for the String offset option, then you must enter an offset. A value ‚â• 0 specifies an offset from the start, a value < 0 an offset from the end.
If Any is selected for the String offset option, then the search string does not have to be located at a specific offset to be considered a match.
Each search description defines the characteristics of a particular viral resource. You can enter from 1 to 20 search descriptions for each virus definition.
With this dialog you can create new virus definitions to detect previously unknown viruses.
If String is selected, then you must enter a search string. Search strings are 1-16 ASCII characters delineated by single quotes or 2-32 hexadecimal characters.
If None is selected for the Search string option, then no string is used to further identify a viral resource.
If Size is selected for the Resource size option, then you must enter a specific resource size. The size must be a decimal number greater than 0.
If Any is selected for the Resource size option, then any size resource of the specified type can match the search description.
If ID is selected for the Resource ID option, then you must enter a specific resource ID. The ID must be a decimal number from -32768 to 32767.
If Any is selected for the Resource ID option, then any resource of the specified type can match the search description.
String offset allows you to specify the location in the viral resource at which the search string must be found.
Search string allows you to define a string used to further identify a viral resource.
Resource size allows you to specify what resource size matches this search description.
Resource ID allows you to specify what resource ID matches this search description.
Enter the resource type for this search description in this area. Resource types are 4 character in length. 'CODE' and 'INIT' are examples of resource types.
Enter a virus name from 1-15 characters in length in this text entry area.
Clicking '>' displays the next higher-number search description for the current virus definition.
Clicking '-' deletes the current search description.
Clicking '<' displays the next lower-number search description for the current virus definition.
