An unpatched zero-day bug in Windows 10 allows attackers to corrupt NTFS-formatted hard drives with just a short command line. In 2020, three times, security researcher Jonas L has published a vulnerability related to NTFS format on hard drives that directly affects Windows 10 that has not been patched by Microsoft.
| Join the channel Telegram of the AnonyViet 👉 Link 👈 |
Microsoft says it’s planning to fix a weird Windows 10 bug that can damage hard drives with just a shortcut. Security researcher Jonas L first warned of the bug earlier this week, describing it as a “nasty vulnerability”. Attackers can hide a specially crafted short command line inside a ZIP, folder, or even a simple Windows shortcut. All Windows 10 users need to do is extract the ZIP file or simply go to a folder containing the malicious shutdown command and it will automatically trigger the damaged hard drive.
The command causes Windows 10 to damage the hard drive
When exploited, this vulnerability can be activated with a one-line command to damage an NTFS-formatted hard drive, Windows will display a message asking the user to restart the computer to fix the vulnerable drive.
The researcher said that this vulnerability can be exploited from Windows 10 version 1803 to the latest version, Windows 10 2004.
More importantly, an account with User rights can still execute this dangerous code, so any user who can open CMD can destroy your hard drive.
* OLDHERNOTICE * The execution of the command below on a working Windows will damage the drive and possibly render the hard drive inaccessible to data. If you want to test it, we suggest you use a VMware virtual machine and install Windows 10 on it. * OLDHERNOTICE *
Here is the command that will cause your drive to fail if executed on Windows 10:
cd c:\:$i30:$bitmap
This command can be executed on CMD, Powershell. Even if you copy over paragraph c:\:$i30:$bitmap and paste in browser or explorer and then press Enter still executes.
Some Hackers try to destroy other people’s data by inserting this malicious code through ZIP, Shortcut, HTML files and triggering a command that causes hard drive failure without Administrator rights.
When running the command in the corner of the screen, a message will appear asking to restart to fix the drive error
This vulnerability also affects some versions Windows XP and similar NTFS errors have been known for many years but have not been fully resolved by Microsoft.
If you’re lucky, Windows starts scanning for drive errors. The data in your hard drive will be preserved, otherwise you have to accept data loss because of this bizarre command.
Currently, according to researchers, it is still not understood why the path $i30 hard drive data is seriously affected. BleepingComputer’s tests also show that you can use this command on any drive, not just the C: drive, and the data will be inaccessible.
![[Godot Shooter] #2: Creating characters & shooting bullets](https://anonyviet.com/wp-content/uploads/2020/08/22.jpg "[Godot Shooter] #2: Creating characters & shooting bullets"){kind=small}