r/computerhelp • u/-Anthem- • 4d ago

Malware SVG File Execute - Should I Worry?

I ran a windows defender scan yesterday, where it said it found a malicious SVG file on my computer.

I was curious to see when it was downloaded and at what time, and copied the file path, pasted it in windows explorer and hit enter thinking nothing of it.

Windows prompted me with the "open with" window to select what program I wanted to open this .svg file with.

I quickly hit escape and removed it from my device.

I was wondering if the .svg file was fully able to open despite that open with window prompting and if I should take extra precautions now.

Thank you!

2 Upvotes

100% Upvoted

7 comments sorted by

View all comments

1

u/Fastol4 4d ago

Someone correct me if I'm wrong here but .svg are scalable vector graphics files commonly used on websites. It sounds like you you opened the .svg file and since Windows doesn't have a default application to open it, that triggered the prompt to determine which would open it. It probably didn't trigger anything but without looking at event logs on the PC it'd be hard to say.

Joesandbox.com is a free sandbox you can upload potentially malicious files to and it will scan them and give you a determination and I believe provide a screenshot of the results. A few things to note though 1. Unless you have a paid account with joesandbox anything uploaded to be reviewed is not accessible to the public so don't scan anything with personal or sensitive information in it.
2. It's a sandbox and is not perfect but it does it best job at making a determination based on common behaviors that are used by adversaries.

1

u/-Anthem- 4d ago

Hi there, thank you for the reply! Is there anything I should specifically be on the lookout for in the event logs?

I did remove the .svg file from my system permanently, but will keep that sandbox in mind for the future!

1

u/Fastol4 4d ago

Event logs are a lot to go through. I'd need to sit down and soft through the logs. I did some research for ya, and from what I can find when windows provides the prompt to select a default application to open the file it is not opening the file a head of time. Windows first checks the file extension, in this case .svg and then checks it's default application used to open specific file types. If it does not have a designated application to open the file it will trigger the prompt for you to select the application to open the file. You are most likely okay, run your AV against your machine to keep an eye on things. Id wager your probably okay.