Scammers cannot use that HTML image technique because of the same-origin policy integrated into all browsers, which means they will not be able to access that location, as long as the HTML is on a remote server, and thus not set the dirty bit.
-No, this is not SOP related. Some sites might forbid it via the CSP, but the CSP is server-owner controlled. Nothing is preventing you from including resources from other sites (e.g. Google Image Search can also include images from other sites)- yep you're right
If I'm right, JavaScript *runs* in the browser (not on the server!) meaning if you have a way to access that in some way you might be able to still trigger it from a remote server. Haven't tried this yet though. *Might be completely wrong, I'm not sure.*
Yeah the $BITMAP stream is essentially actual file extent locations, and having two of these is a corruption, especially when one of them is in a wrong format. You can still make these corrupted streams in Linux, but it's not that useful.
Once I saw a notification saying FIX DRIVE ERRORS CLICK TO RESTART YOUR PC. I clicked it and it restarted my PC, started a ChkDsk scan, started a Startup Recovery scan, then got to work on the drive errors. It took about 15 minutes before restarting into Windows.
Avast antivirus actually denied clicking on this page, "because it was infected with Win32:NtfsCorrupt-B[Expl]" Why did just the name triggered it ? And why second clip allowed the page to load. Actually, no. Avast doesn't let me watch the video part of the page, everything else work Now working after FlyTech tweaked some things near the end of the premiere
I got multiple Win32:NtfsCorrupt-B[Expl] the same day, at first x site couldn't be accessed and after when I restarted it. The website works although avast still block the same thing, but I know my pc is not infected. What a weird bug but I am glad Avast could detect it
I agree with MS this is not critical but NOT because it requires social engineering. NEVER underestimate social engineering, it's the way most of the modern hacks to big companies happen (eg the recent Twitter hack) Social engineering is extremely powerful and relatively easy for an experienced player to pull off, especially when it requires getting into intricate stuff like command line and NTFS alternate streams, where chances are whoever is on the other side of the screen will not know better to understand what's going on. Remember that scammers stole people money for years using nothing more than tree and color.
so i think i have a problem cause of this. I cannot format my SSD, cannot clean via CMD Diskpart, cannot Delete volume, and what i mean is my Disk is become invulnerable. Everytime i went for a chkdsk it only got me a normal boot restart even it said there will be a checking. Any help? i don't know what can i do next.. i cannot do anything with my SSD. please if you all got something, tell me i would try to do anything to remove this even gotta delete all of my SSD data cause ive tried many ways but I can't
Well Fly tech, scammers can't activate the bug since new browsers have sandbox features which will isolate the website from host by making an fake dir or disk(until you gave the permission to website for accessing local storage but then too website can only read files not write to the disk) also when we drop a file in website (eg. Photo converter) it first get copied to a folder then it get to the web I think
Hi mate, i don't know if my problem is related to this however when i ran the chkdsk util after a bsod error: ''UNEXPECTED STORE EXCEPTION'' and another ''CRITICAL PROCESS DIED". The chkdsk returned several lines of errors: Error detected in index $I30 for file AEA5 Error detected in index $I30 for file AEA5 Error detected in index $I30 for file AEC1 Error detected in index $I30 for file AEC1 Error detected in index $I30 for file AEC7 Error detected in index $I30 for file AEC7 I'm confused as I've not seen this exact problem on youtube, please can you help.
Oh, so they probably optimized away something to keep access to MFT fast. Since on some machines only one logical volume is present literally all access goes through MFT so they sacrificed correctness for speed
The patch was fixed- I entered my host PC with this command line: cd C:\:$i30\:$bitmap Result: The filename, directory name, or volume label syntax is incorrect. Result on fsutil: Volume - C: is NOT dirty Windown Version: 19042.746 (20H2) My eyes, why did I put a backslash on the :$i30 :bitmap
Hey flytech videos, when i do "NTFS Corruption" bug, and then when i do chkdsk, it will my data get corrupt? Im very scary when i do chkdsk, and then, my data get corrupted or get deleted (sorry for bad english)
@@FlyTechVideos i don't know why, and i didn't do anything, but, i got messages from my friends like this "do cd C: / $ i30: $ bitmap on your cmd" but i didn't do that, when i searched on google like this "what is cd C: / $ i30: $ bitmap" and then I restart it, and then I get a notification message "restart to fix drive error", I want to press it, but I'm afraid that any of my folders or files exist that is corrupted or lost. (Sorry for bad grammar again)
18 minutes ago and now the video thumbnail attracts me :) Edit: after watching this video there will be so many exploits and viruses to windows user even through internet
Not really, most updated browsers block sources from localhost, meaning that the only way to trigger the bug with a web is if the web is in the local machine, otherwise any website could use this bug because the browser will just block it
The fact that this bug doesn't occur on Win7/8 but on XP tells me that at some point in time, Microsoft used WinXP code to do something on Win10, and that's not really reassuring tbh
Just checked on Vista. Doesn't trigger and it's the nearest to XP... Well, if being based on Server 2003 is close to it... Wouldn't you guess it, Server 2003 x64 doesn't trigger it either. That's a very damning statement.
Even if the vulnerability isn't remote, it should still be considered as a privilege escalation and denial of service exposure. And that's already bad enough.
How this bug doesn't work on Windows 7 and 8, but work in newer and older systems (i was meant Windows 10 before the bug fix of this issue and Windows XP)
someone got me to run the line in my browser and after restarting my pc basically everything went back to normal, but it tries to do a chkdsk every time i boot. is there a way to disable this?
They already said, all it does is makes Windows think the drive is bad so Windows checks the disk for issues. But, nothing happened to the drive itself, meaning it is not dangerous. The only exception is when you continue to do it over and over again, but that has nothing to do with the bug and instead has to do with the fact that Windows is looking through your entire hard drive, multiple times.
CSS can only reference files from another HTTP server or relative URLs from your own server assuming you are using url(). If you are working locally, you can use the file:// protocol but this is immediately stopped in it's tracks by CSP when applied outside of your local enviornment.
In old computer, I was use Windows XP in first time. IDK why chkdsk check my disk C: always. Now watch your video, I know why chkdsk check my disk C: always because some has use The "NTFS corruption" bug. Now I use Windows 7 in old computer. 1 sub for you!
About the way to trigger the bug using a web shortcut, i will make a website that makes you download this shortcut, and if you look at it in a folder you will potentially get screwed.
Scammers cannot use that HTML image technique because of the same-origin policy integrated into all browsers, which means they will not be able to access that location, as long as the HTML is on a remote server, and thus not set the dirty bit.
you can easily troll unsuspecting friends or family members with it tho ;)
-No, this is not SOP related. Some sites might forbid it via the CSP, but the CSP is server-owner controlled. Nothing is preventing you from including resources from other sites (e.g. Google Image Search can also include images from other sites)-
yep you're right
@@FlyTechVideos not from local storage, though, which is the whole point of that "vulnerability"
If I'm right, JavaScript *runs* in the browser (not on the server!) meaning if you have a way to access that in some way you might be able to still trigger it from a remote server. Haven't tried this yet though. *Might be completely wrong, I'm not sure.*
Anyone else confused.
First was Enderman version, followed by Siam Alan version and, finally, we have Flytech version. The digital triforce now is complete.
Yes, but FlyTech
explained in more detail =)
These three are the ultimate trios
@EternalGames h
Digital trio Triple the tech
@EternalGames it was globalroot, but A for effort
I can't understand how Windows fixed it in 7, then broke it again in 10. It's so funny yet stupid.
You can't understand that? Windows 10 is a pile of garbage; it makes sense that its FULL of bugs. 😒 (Windows 11: Hold my B.E.E.R. PARTIES…)
Because Microsoft
@xeliicious WHY U SAY THE S WORD
@@alli-windowsexpert why you replying to a 3 year old comment lmao
why you
Just saw Enderman's version a little bit ago. This should be good.
Gonna add this to my game so if you loose the boss fight it looks like the main bad guy is doing stuff
Disk is dirty? Put it in the diskwasher!
lol
Good one😂
He knows this
He knows that
He knows it all about the OS
Who you gonna call?
FlyTech Videos
@Carlos Maukonen no shit
@Carlos Maukonen no one cares
@Carlos Maukonen r/wooosh
@Carlos Maukonen your pfp is stolen"!!!!`1
Your system has crashed
:
Finally, it was nice for once to have windows 7.
Same.
and 8.1
Raspbian Buster.
Manjaro Linux
@@KSPAtlas Linux Mint.
Windows once "repaired" my hard drive. It turned everything into raw and completely destroyed NTFS
Press F to pay respect
F
now how the hell is that possible
Add terminal logo:>_ to not pay respects
not possible, op just playin with ya.
Oh, thank you for making this video. I thought my hard drive is corrupted.
Thank you so much for adressing this! Love all your videos:)
like 3 discord servers i'm on started screaming at me about this vulnerability
this shouldn't even be a thing how was this not discovered
what, im subscribed to you and i didnt expect to see you here.
@@goodrun88 lmao
hamburger
0:19 I like that error code
Yeah the $BITMAP stream is essentially actual file extent locations, and having two of these is a corruption, especially when one of them is in a wrong format. You can still make these corrupted streams in Linux, but it's not that useful.
lol i like how you made the html file seem like it predicted that your drive got corrupted.
0:37 damn jan 24th? how do i time travel like you!1!1!1!1!
14th :E
24th OF Jan.
@@simontay4851 no, 14th
@@simontay4851 are you two blind?
@@SquooshyShark1000 OH, look, Gelatin.
Once I saw a notification saying FIX DRIVE ERRORS CLICK TO RESTART YOUR PC. I clicked it and it restarted my PC, started a ChkDsk scan, started a Startup Recovery scan, then got to work on the drive errors. It took about 15 minutes before restarting into Windows.
Avast antivirus actually denied clicking on this page, "because it was infected with Win32:NtfsCorrupt-B[Expl]"
Why did just the name triggered it ? And why second clip allowed the page to load.
Actually, no. Avast doesn't let me watch the video part of the page, everything else work
Now working after FlyTech tweaked some things near the end of the premiere
Avast already recognizes it, and prevents it. Good move.
@@malwaretestingfan Yes, at least they're not inactive, that's cool !
I got multiple Win32:NtfsCorrupt-B[Expl] the same day, at first x site couldn't be accessed and after when I restarted it. The website works although avast still block the same thing, but I know my pc is not infected. What a weird bug but I am glad Avast could detect it
@@shirouemiya751 it's too sensitive, even if it appears as text it will trigger the av without doing anything at all to the computer
I agree with MS this is not critical but NOT because it requires social engineering. NEVER underestimate social engineering, it's the way most of the modern hacks to big companies happen (eg the recent Twitter hack)
Social engineering is extremely powerful and relatively easy for an experienced player to pull off, especially when it requires getting into intricate stuff like command line and NTFS alternate streams, where chances are whoever is on the other side of the screen will not know better to understand what's going on. Remember that scammers stole people money for years using nothing more than tree and color.
I see what you did here.
,,Hello, your computer has virus”
so i think i have a problem cause of this. I cannot format my SSD, cannot clean via CMD Diskpart, cannot Delete volume, and what i mean is my Disk is become invulnerable. Everytime i went for a chkdsk it only got me a normal boot restart even it said there will be a checking. Any help? i don't know what can i do next.. i cannot do anything with my SSD. please if you all got something, tell me i would try to do anything to remove this even gotta delete all of my SSD data cause ive tried many ways but I can't
Well Fly tech, scammers can't activate the bug since new browsers have sandbox features which will isolate the website from host by making an fake dir or disk(until you gave the permission to website for accessing local storage but then too website can only read files not write to the disk) also when we drop a file in website (eg. Photo converter) it first get copied to a folder then it get to the web I think
I have added a short info to the description
@@FlyTechVideos ok
@@FlyTechVideos I just explained the discription in detail
Holy. I switched to Linux week ago and now I want to try this bug AAAAA
Lol
you can use a virtual machine with windows
@@Someguyy well- yeah I just don't know why the iso download always fail.. I only have windoze 98 rn
"debugfs -wR dirty /dev/whatever" is close enough :)
Hi mate, i don't know if my problem is related to this however when i ran the chkdsk util after a bsod error: ''UNEXPECTED STORE EXCEPTION'' and another ''CRITICAL PROCESS DIED".
The chkdsk returned several lines of errors:
Error detected in index $I30 for file AEA5
Error detected in index $I30 for file AEA5
Error detected in index $I30 for file AEC1
Error detected in index $I30 for file AEC1
Error detected in index $I30 for file AEC7
Error detected in index $I30 for file AEC7
I'm confused as I've not seen this exact problem on youtube, please can you help.
Oh, so they probably optimized away something to keep access to MFT fast. Since on some machines only one logical volume is present literally all access goes through MFT so they sacrificed correctness for speed
You can also create a death .bat file that runs the command
HOW DID YOU GOT THAT SECRET ANIMATION?!?!?!?!
Which?
it's an insider build
@ThatPcGeek thnx
Btw this worked on my friends windows 7 laptop. He hasn’t been able to turn it on since. Probably had something else wrong with it.
that's not "working" because this bug doesn't cause any real damage, must be another issue
The patch was fixed- I entered my host PC with this command line: cd C:\:$i30\:$bitmap
Result:
The filename, directory name, or volume label syntax is incorrect.
Result on fsutil:
Volume - C: is NOT dirty
Windown Version: 19042.746 (20H2)
My eyes, why did I put a backslash on the :$i30 :bitmap
*drive marked dirty* ok **washes drive with soap and water**
I clicked on it, forgot I had it on and I thought my headphones were broken at the intro
my school pcs dont block powershell, i know what i have to do now
me, a linux user: haha lol windows got another bug
Something do be wrong with Windows tho
Wouldn't there be a way to forcefully reset the dirty bit without running a chkdsk scan?
not through intended means, no
@@FlyTechVideos im your biggest fan
jokes on you, i use linux, i can’t be harmed by foolish programmers when i use zfs
*ext4
@@KSPAtlas you know that there are more file systems than ext4?
@@404oops zfs sucks.
@@XsaviXander and Why exactly?
It fixed lol
4:28 typo?
And I thought it was just the website sending a fake notification...
0:39 He time traveled.
no
And this is why I still use windows 7 to this day.
I don't think scammers could use the Shortcut Icon method. If you download the shortcut, it is no longer a shortcut.
I've tried to run this with Windows 8.1 and it trashed the partition...
Startup Repair and chkdsk didn't work for fixing it.
i tried in windows 7 it just say : "there are no specified location". Just like that
0:38 Video says January 24th
Premiered on January 16th
The premiere started from 16 january but the premiere video started at 25th january
1:03 Finally a brazillian
i swear i always read NTFS as NFTS
Urnotheayonliwun
NFTs
For me this is terrifying cuz chkdsk actually corrupts my hard drive
How
Hey flytech videos, when i do "NTFS Corruption" bug, and then when i do chkdsk, it will my data get corrupt? Im very scary when i do chkdsk, and then, my data get corrupted or get deleted (sorry for bad english)
well, it should not, but i wouldn't risk it. don't do it!
@@FlyTechVideos
i don't know why, and i didn't do anything, but, i got messages from my friends like this "do cd C: / $ i30: $ bitmap on your cmd" but i didn't do that, when i searched on google like this "what is cd C: / $ i30: $ bitmap" and then I restart it, and then I get a notification message "restart to fix drive error", I want to press it, but I'm afraid that any of my folders or files exist that is corrupted or lost. (Sorry for bad grammar again)
@@GuckTubeYT don't worry, just do the chkdsk, nothing bad will happen
@@FlyTechVideos oh okay, thanks
@ThatPcGeek i want to try, but, i dont have enough storage
18 minutes ago and now the video thumbnail attracts me :)
Edit: after watching this video there will be so many exploits and viruses to windows user even through internet
Not really, most updated browsers block sources from localhost, meaning that the only way to trigger the bug with a web is if the web is in the local machine, otherwise any website could use this bug because the browser will just block it
I clicked on the popup, then got to restart and my drive suddently got RAW, how did that happen?!
it works in windows 7
it just does not tell you that it is dirty
The fact that this bug doesn't occur on Win7/8 but on XP tells me that at some point in time, Microsoft used WinXP code to do something on Win10, and that's not really reassuring tbh
Just because portions of code were present in older Windows versions doesn't mean they're inherently bad.
Just checked on Vista. Doesn't trigger and it's the nearest to XP... Well, if being based on Server 2003 is close to it... Wouldn't you guess it, Server 2003 x64 doesn't trigger it either. That's a very damning statement.
This bug is not affected on Windows 2000 either. Also tried on Vista VM aswell, Still no issues.
It is kinda like the Con/Con bug in windows 9x
actually not this one, but the Win10 BSOD bug does.
Even if the vulnerability isn't remote, it should still be considered as a privilege escalation and denial of service exposure. And that's already bad enough.
You might be interested in my newest video then :)
@@FlyTechVideos Switch to Microsoft Edge
Aha, this is why my AV random alerts me to Win32:NTFSCorruption-B... ever if my Windows clean...
avast LOL
The new C:/con/con
0:12 how can you make websites like this?
OMFG ONLY THE OGS REMEMBER THIS SONG
Bro, when I was trying to install windows 7 it showed the boot screen fixing the disk errors
Very good video. Thank you.
The bug isn't able to be triggered through a , but how about a page that redirects you to the malicious link? will it work?
No, you cannot in any way launch local content from a remote website. i tried
@@FlyTechVideos :( big sad
hi @FlyTech i have an question, why the folder:Documents and Settings in windows 10 is already a folder: Users?
I'm pretty sure it doesn't exist, it's a windows XP thing.
I just google searched it and it triggered the bug. Not on a VM either... ouch
I actually have a dirty drive. When i restart to fix drive errors, it just asks again, so the restard was a waste of time. How does i fix it?
You could have tried that on Windows Vista and Windows 8.
He test on Windows 8 ( 7:57 )
@@rohail_aziz Look again and read the text again.
I tested it on Windows Vista VM and this bug is not affected.
Also this bug is not affected on Windows 2000 aswell.
How this bug doesn't work on Windows 7 and 8, but work in newer and older systems (i was meant Windows 10 before the bug fix of this issue and Windows XP)
1:53 This happened in mine too as it checked the C drive then after that it suddenly go into Startup Repair mode for no reason…
Looks what MS-DOS behaves if you actually installed it on NTFS
MS-DOS does not have NTFS driver support.
@@chocolateimageexactly
Can you try this out and see what happens on a windows XP and Windows 2000 (w2k has ntfs support)
he tried xp
@@taududeblobber221 oh ok but i would like to see if someone could try 2000 since it has ntfs support
@@YeetiusMaximusYT I tried it with Windows Vista and 2000, Both are not affected.
Restarted and got stuck in recovery loophole did the windows again and same notification appeared. Any suggestion what's wrong?
5:30 anybody noticed it stopped at 69%?
Nice
My windows xp pc can't boot anymore because chkdsk idk what is the problem
What if i dont?
someone got me to run the line in my browser and after restarting my pc basically everything went back to normal, but it tries to do a chkdsk every time i boot. is there a way to disable this?
Whew, I read the title wrong, thought it was "The NFTS corruption bug"
ok
@FlyTech Videos
January 24th??????????????? ITS ONLY 16 DAYS INTO 2021!
This happend to me but it was total error without me searching something, and it fixed itself huh
this bug only works in windows 10?
So the last question is : *That Dangerous?*
They already said, all it does is makes Windows think the drive is bad so Windows checks the disk for issues.
But, nothing happened to the drive itself, meaning it is not dangerous.
The only exception is when you continue to do it over and over again, but that has nothing to do with the bug and instead has to do with the fact that Windows is looking through your entire hard drive, multiple times.
4:31 uer????
Wait what? Article published on 24th january? Its 19th
It should read 14th 😭
nice string for hackers that need a restart
You can install Windows 10 on your android phone first go to google play store then search wins 10 simulator and click install then open the app
I found a directory that can’t be accessed
To fix this problem, you have to screenshot it, don't thank me. :)
Good that the Doctor Microsoft cured the allergy of Windows.
Can it be accessed by loading a CSS file?
CSS can only reference files from another HTTP server or relative URLs from your own server assuming you are using url(). If you are working locally, you can use the file:// protocol but this is immediately stopped in it's tracks by CSP when applied outside of your local enviornment.
@@Tropical126 Yes? Then can it be used with location = 'file://C:/:$i30:$bitmap'?
@@unknownaccount4783 Only in a local environment. If you aren't accessing the file directly through your hard disk it will get blocked.
why did i think it said NFTS and not NTFS
4:33 uer (user) flytech
But what about Vista?
So is it just running a command that makes your system do something that it can "predict?"
In old computer, I was use Windows XP in first time. IDK why chkdsk check my disk C: always. Now watch your video, I know why chkdsk check my disk C: always because some has use The "NTFS corruption" bug. Now I use Windows 7 in old computer. 1 sub for you!
About the way to trigger the bug using a web shortcut, i will make a website that makes you download this shortcut, and if you look at it in a folder you will potentially get screwed.
but it said in the video the bug doesn't do any real damage
@@taududeblobber221 i know, but you still can use it to scare 9 year olds
it doesnt work on build 21292 of windows 10
how about windows 8.1?
0:45 “ThE sYsTeM wOn’T bOoT uP AgaIN!!1,,!
did this on my physical machine and it does the same thing
nothing is corrupted either
It doesn't work anymore I think I tried
Good Job! but what if we try The "NTFS corruption" bug in Old Windows versions? (not in XP)
0:38 January 24th? But it's just the 17th...
14th* :O
Don't always trust the media...
Looks like I'll be booting to Windows 7 hard drive whenever I power on my PC, that's the advantage of having Retail licenses on OS's.
Make a video trying to access the net group command on windows 10