------------------------------------------------------------------ ROSE SWE EXE Cryptor Small/Antivirus $Id: RECAV.DOC,v 2.6 2004/08/18 21:35:08 ralproth Exp $ ------------------------------------------------------------------ ____ ______ __ __ /\ _`\ /\ _ \/\ \/\ \ \ \ \L\ \ __ ___\ \ \L\ \ \ \ \ \ \ \ , / /'__`\ /'___\ \ __ \ \ \ \ \ \ \ \\ \ /\ __//\ \__/\ \ \/\ \ \ \_/ \ \ \_\ \_\ \____\ \____\\ \_\ \_\ `\___/ \/_/\/ /\/____/\/____/ \/_/\/_/`\/__/ Synopsis ~~~~~~~~ RECAV is an EXE cryptor (based on REC/Small) and an EXE anti virus shield. Usage ~~~~~ RECAV inputfile.exe (creates out.exe) Only MS-DOS EXE files without relocations are supported! Use the included batch files to automatically rename OUT.EXE back to the original file name. Hints ~~~~~ 'inputfile' can not have relocations (use e.g. WWPack before). After protecting your inputfile it is locked against further protection, basic modifications and detects virus infections of itself! The virus detection is very effective, only true stealth viruses can bypass this integrity check. Simply double protect a file with REC/AV to 'simulate' a virus infection of this file. Removing REC/AV ~~~~~~~~~~~~~~~ The REC/AV envelope can be removed using the unRECAV utility provided by Christoph Gabler. History ~~~~~~~ version date length comments 1.09 18-Aug-2004 496 Added check for EXE header, added version string to envelope (e.g. 3.71 as of 18.08.2004) 1.08 08-Nov-2003 490 Changed some texts/doc, now compilation time is included into the shield 1.07 22-May-2002 442 Changed the decryption key 1.06 11-Dec-2001 441 Fixed an bug with CS:IP of the target file to protect. 1.05c 04-Sep-2001 437 Tried to make it more compatible with Olaf´s 386 CPU 1.05b 26-Feb-2001 436 Recompiled with URL+Email added 1.05 14-Aug-2000 436 Fixes for NT in the batch files 1.03 07-Aug-1999 436 Fixed some rare crashes if file was modified. 1.02 19-June-1999 408 rearranged the code, because RHBVS triggers a false positive. Credits: Ralf Borgmann. Fixed min/max memory allocation. 1.01 18-June-1999 397 added a small anti debugging trick 1.00 15-June-1999 304 initial release