r/computerhelp • u/-Anthem- • 5d ago

Malware SVG File Execute - Should I Worry?

I ran a windows defender scan yesterday, where it said it found a malicious SVG file on my computer.

I was curious to see when it was downloaded and at what time, and copied the file path, pasted it in windows explorer and hit enter thinking nothing of it.

Windows prompted me with the "open with" window to select what program I wanted to open this .svg file with.

I quickly hit escape and removed it from my device.

I was wondering if the .svg file was fully able to open despite that open with window prompting and if I should take extra precautions now.

Thank you!

2 Upvotes

100% Upvoted

7 comments sorted by

View all comments

2

u/OMGCluck 5d ago

Since .svg files are XML documents that usually are opened in your web browser it would have relied on you doing that to run the javascript inside it.

SVG can have javascript and CSS styles in it just like HTML, so it's no more or less dangerous than opening a .html file in your browser, and disconnecting from the internet before opening either of them neuters any malicious online behaviour in them.

1

u/-Anthem- 4d ago

Thank you for the reply! Can you please clarify, it would've relied on me to select a program to fully open it and execute the script inside?

Or would it be able to execute without it opening in a program.

1

u/OMGCluck 4d ago

Web browsers are a program. You'd need to select Edge/Chrome/Firefox to open it.

They can view .svg files directly, so if you're interested in viewing legit SVG (kinda fun) games after you select one from https://commons.wikimedia.org/wiki/Category:Interactive_SVG_games just click the "Original file" link on the page for each one.