
README file - RAV6 for AntiVirus Researchers ("RAVAV")
======================================================


Index:

0. What is RAVAV ?
1. Getting your activation key
2. Updates
3. The Team
4. New viruses
5. Greetings/Thanks

RAVAV is (C) 1994-8 by GeCAD.


0. What is RAVAV ?
==================

RAVAV is a Win32 console version of Romanian AntiVirus (RAV).
There is no DOS version of RAVAV, but we will make avaible one in short
time. (as well for Linux and OS/2)

A special version of RAVAV is also used by the RAV Internet Mail Gateway
to scan email messages and attachements for viruses, and it will
also be included in the upcoming RAV6 for Microsoft Proxy Server and the
RAV6 for Microsoft Exchange Server.



1. Getting your activation key
==============================

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
(please read the file LICENSE.TXT to find out if you have the right
to use RAVAV)
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

To get your RAVAV activation key, please send an email message to
"craiu@gecad.ro" including your name, the company/organization
(please specify) you are working for, your function, and which
AV product are you developing (if any). Do not forget to attach you
public PGP key, since I won't send you the RAVAV activation key
unencrypted. If you don't have a PGP public key (?), download a PGP
version from http://WWW.IFI.UIO.NO/pgp, and create your own
PGP public key. Of course, you can also buy the commercial version
of PGP, for more details take a look at http://WWW.PGP.COM/

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
 Before asking me for the key, you must agree in advance not to give
 your RAVAV key to anyone else, and not to use the key to run RAVAV on
 more than 67 different computers.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

2. Updates
==========

The full package can be found at the same location, the link
is ftp.gecad.ro/rav/ravav/ravXXXav.exe, where XXX is the version
number, for example "520".
At the same location we usually upload a PGP signature for the
ravXXXav.EXE, created with our PGP secret key, get it as
ftp.gecad.ro/rav/ravav/ravXXXav.asc

RAVAV is also uploaded to several AV sites, such as 
ftp.elf.stuba.sk/pub/pc/avir/ravXXXav.* (eg. .zip/.exe/.asc)

If you get RAVAV from other site than ftp.gecad.ro, we strongly
recommend checking the authenticity of the archive using PGP
and the ravXXXav.asc "detached" signature.

NOTE: Some BBS owners or ftp admins might not want to include
the detached signature file on their sites. If you can't find
the signature file for your archive, you can contact me at
<craiu@gecad.ro> and ask for the detached signature file.

RAV6 is upgraded monthly, or often. You can download the RAVAV updates
from our ftp site, ftp.gecad.ro/rav/ravav/updates
If you don't have ftp access, we can send you the updates as soon
as they are released. Please send an email to craiu@gecad.ro for more
details.



3. The RAV Team
===============

A list of all those who are, or were involved in the RAV development process:


Costin RAIU <craiu@gecad.ro> - Costin wrote the original DOS text-mode
        interface, the OLE2 engine, macro heuristics engine, the standard
        CRC-based detection algorithm, boot detection algorithm/signatures,
        string heuristics, virus analysis, virus descriptions, RAVESPY,
        AVAC virus cleaning language, virus collection management tools,
        RVM - automatic virus replication system, the cool buttons from
        the RAV WWW homepage (http://www.rav.ro/) and other less
        important things. (like: "RAVRFC 067 - Specifications for virus
        trap files", "RAVRFC 069 - Extension to RAVRFC 067", the copy
        protection technology used in old RAV versions, the DOS help
        hypertext engine, the TMC Replication system (4/6) - a set of AWK
        scripts to replicate slow infectors in thousands generations,
        RAVAV key system, the RAVAV dox, Persisstence of Controls (POC)
        graphics library, and the list can go on for pages, but I'll stop
        it here)

Adrian MARINESCU <mady@gecad.ro> - "Mady" as we all call him, wrote RACE/ACE
        (the RAV code emulator engine), RAVESPY, RAVUTIL, RALERT, polymorphic
        viruses analysis, RAVAV file engine, code emulator heuristics engine,
        generic cleaning support, database interface, RVM trap generation
        program.

Cristian CHICIOREAN - Cristi wrote the RAV boot/MBR access modules for
        Windows95, and some viruses descriptions.

Radu HERGELEGIU <herradu@gecad.ro> - Herr Radu added detection for many
        viruses, and wrote the first automatic signature extractor we
        used in RAV's developement.

Serban PLESNILA <serban@gecad.ro> - Graphics, Win32 GUI, RAV6Win Setup.

Ionut NISTOR <ionut@gecad.ro> - RAV4 DOS Install program, virus help engine
        for RAV 3. Ionut also wrote the RAV6 DOS text mode interface.

Victor CHIVU <victor@gecad.ro> - RAV6 documentation

Ileana VOINEA <ileanagecad.ro> - RAV support.




On the other side, the management team:

Radu GEORGESCU <radug@gecad.ro>
Lucian CUMPATA <clucian@gecad.ro>
Madalina SUICESCU <mada@gecad.ro>
Serban PREJOIANU <prejo@gecad.ro>
Cristian HERGHELEGIU <cristi@gecad.ro>

for the US sales I would like to mention:

Claudiu OPREA <claudiu@prodigy.net>

... and the technical support:

Alexandru BURLACU <balex@gecad.ro>
Valentin STEFANESCU <valy@gecad.ro>

Finally, we must say that the RAX compression utility (which will be...)
used to create the RAVAV distribution archive, is written by 
Sabin BELU, <sabin@gecad.ro>


4. NEW VIRUSES / SUSPECT FILES
==============================


If you wish to send us new viruses, or files reported by RAV as might
contain a unknown virus ("New/Unknown" or "Type*"), please encrypt 
the files with the PGP key included in the document, and send the 
files to newvir@gecad.ro
Please do not send unencrypted mail, or mail encrypted with various
encryption or compression programs. PGP is by far the best, and we
like using it.

Thanks in advance.


The PGP key:

Type Bits/KeyID    Date       User ID
pub  1024/AC12CAF9 1997/09/28 RAV Antivirus <newvirus@gecad.ro>

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.6.3i
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=3J0Z
-----END PGP PUBLIC KEY BLOCK-----


5. GREETINGS / THANKS 
=====================

        Alfonso Luna - Panda AV
        Andreas Marx - GeGa Software
        Andrew Krukov - Kaspersky Labs
        Andy Nikishin - Kaspersky Labs
        Eugene Kaspersky - AVP
        James Edward - Accura
        Dr. Klaus Brunnstein - VTC Hamburg
        Martin Schwartz - Laola
        Marius Gheorghescu - AVX
        Petr Odehnal - AVG
        Stefan Kurtzhals - F/WIN


RAV - Romanian AntiVirus is (C) 1994-97 GeCAD.