Hi everybody. I don't know if this is the right place to put my topic, but since I use NAV '07, I figured I'll give it a shot.

First off, a bit of background. I live in a town of about 30,000 in rural Africa which is being over-run by viruses, especially those spread by memory stick (flash drives). There are two or three internet cafes in town, and they probably started the whole thing. I had to do some work for several NGO/NPO's that lost a lot of data/time dealing with the viruses. I think we finally convinced the owners of the cafes to invest in some decent anti-virus solutions. Another part of the problem is that many of the organisations were caught completely off guard (most of this happened before I started working).

Anyway, there are still some viruses floating around doing some damage, especially the Rungbu virus. For those of you not familiar with it, this virus copies the name of a Word document, appends the actual document to itself, changes the file extension to .scr and propagates every time you open it (but it also allows you to open the original Word document). It also changes the registry so that you cannot view known file extensions and I think it also disables registry editing.

When an anti-virus program detects the virus, it deletes the entire file. Now, it seems like a huge waste, especially since the virus only takes up the first part of the file (learned that thanks to this post - http://www.theotokos.co.za/umtata/post/index/32/Technovirology-in-action). The virus takes up the first 46592 bytes of the file.

I haven't been able to find a program anywhere that just cleans the files, instead of deleting the whole thing.

Now, my only solution is to open the files in a clean computer (no data, no anti-virus), split the files into two parts (one with the virus, the other with the Word document) and delete the virus and keep the document. But this takes a bit of time. I've tried hex editing tools and none of them seem flexible enough for what I need. I'm also thinking about maybe using a batch file along with the file splitting program, but I haven't had time to do it yet...

Is anyone up to the challenge? Or does anyone know of a program that can remove the first 'n' bytes from a file?

Thanks in advance for the help!