Computer Hope

Hi, computer 1 has a rootkit, computer 2 (likely) doesn't.

I'll admit, I've perused other forums for this question, here is a sample of the advice I was given:

- As long as there's no payload on computer 2 you'll be fine to download the files (Adobe, Office, pngs, video files) from OneDrive (they then helped me scan computer 2)

- Boot into linux, use an antivirus and then transfer the files via an external HDD

- Disable the internet and transfer the files to an external HDD

The impression I'm given by various websites is that I should be concerned that the rootkit is deep in the machine and can jump into the external drive and infect my new computer, and that rootkits are near impossible to find, which makes me extremely paranoid. I'm eager to hear your advice as to what I should do. Thank you very much.

Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
*************************************************************************
What makes you think that your computer 1 has a rootkit? I would suggest that you transfer your files you want to transfer to computer 2 by putting the files an external HDD, disk or memory stick. Next, scan those files with your AV before putting them on computer 2.

So...it's safe? I can just use a usb to deliver files from an infected PC and be done with it? I already uploaded them
to OneDrive and used Virustotal to scan them and they appear fine. But how do I know for sure? Is the thing about payloads valid?

QuoteBut how do I know for sure?

In life, there is no certainity.

QuoteIs the thing about payloads valid?

Payload explanation

The link doesn't make sense to me in the context of what the Malware response team was telling me. That's not a yes or a no, Are you trying to communicate that they're wrong, or you don't know, don't care, or what? I don't understand.

I have no idea what the Malware response told you but the payload should have nothing to do with you're trying to transfer files to another computer.