Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
Specifically, I was trying to install windows 10 on a fresh new ssd, i was trying to use a usb to do it but it turns out I did not create the usb drive correctly, so I’m stuck on the “reboot and select proper boot devices” screen on my bios.
If the usb was infected, can it infect my ssd or my bios at this point?
It depends on what stage of the boot loading or fresh new installation point you are on in the BIOS. From what I am reading, it seems you are only at the "reboot and select proper boot devices" screen. This is typically a BIOS screen that is part of the BIOS which is typically located in the small boot partition or a BIOS flash chip. The BIOS on many modern day computers, especially those that are designed to come with Windows 10, usually are called UEFI and are different than BIOS from the past. Modern day computers also have a TPM chip on the motherboard.
From an external memory interface like a USB, the UEFI can be infected although the likelihood of that happening depends on where the USB came from and where did the image of the OS on the USB came from. As long as the first two came from legitimate means of obtaining, I do not think there is any need to panic.
If TPM is already activated on the system, then any attempt to infect the UEFI would be useless as the computer will not be able to start. The TPM is an embedded chip on a computer that has a purpose of security, where everything is signed via a RSA key that is not accessible and is only stored inside the TPM module. Any changes done to the system firmware that causes the signature to be faltered will cause the TPM module to stop the computer. However many manufacturers have TPM disabled by default, this is because it delays the boot/startup process as everything has to get checked by the TPM module.
Regarding the SSD, because it is a fresh SSD there is no data on it at this time. If it does get infected, as long as the BIOS is not infected, doing a clean install from an external drive in BIOS can clean and thus remove the infection on the SSD.
From your question, I am not sure if you are just asking or you really feel that your USB is infected. Is the USB device showing in the selection list? Doing a misstep in the burning an installation image via official steps recommended by Microsoft, in my opinion would not cause the USB to have a virus. Just the image on the USB may be corrupt. A corrupt OS installation image is not a virus.
Conceptually UEFI and BIOS code can be modified to the advantage of an attacker as can the firmware of storage devices. These are very complex non-generic attacks that are very uncommon.
Whether you could modify an SSD's firmware to modify UEFI or BIOS is a level above the previous attacks, I'm not sure if it is possible, which is to say it may not be impossible. To say it's incredibly unlikely and even more to have happened to you is an understatement.
