There is an old Windows XP installation that was being used without even an antivirus. This WinXP computer has files. These files are important and should be moved to a Linux installation. Given the lack of any security practices on the side of the WinXP owner it seems possible that the data contains malware.
I can now:
- Ignore this and simply keep using these files in Linux; after all Linux is supposed to not need AV.
- At the very least the files should be scanned to avoid accidental redistribution of malware if they are ever sent to anyone else again
- The files contain eg a multitude of .odt / .doc documents - maybe it's a very remote possibility, I don't know, but malicious macros are OS independent?
- Install ClamAV on Linux machine, scan the files, remove Clam afterwards.
- AFAIK ClamAV is known for its poor detection rate - scanning the files with it is only marginally better than not scanning at all?
- Install an AV on the WinXP machine (Panda Free AV still supports WinXP, doesn't it?), scan the files there, only transfer them afterwards.
- Which means going online with WinXP once again - this just feels wrong
- Any options I overlooked?
I feel stuck. Not sure how to progress.
Note I wouldn't like to manually inspect the files and eg remove any potentially suspicious files like .exe files while leaving safe files like .png files intact. Reason is the data is not mine, I was just asked to transfer it so that someone else may use them.
What is the accepted best practice in a situation like this?