CrowdStrike solutions for inaccessible Windows OS.

While the CrowdStrike issue is leading to Windows crashes, its impact seems to go beyond that. With Windows being widely used and CrowdStrike being a major cybersecurity company, various organizations and services seem to be facing disruptions because their computers are affected.

Some says jokingly that

"CrowdStrike declaring an early weekend by taking out half the world’s systems. Even ransomware isn’t this effective 😂" @_theVIVI

"Bit of personal news - it's my first day at Crowdstrike as the guy who flicks the On switch every morning. Completely blanked on it today but reckon I will nail it Monday." @sexenheimer

CrowdStrike has recently unveiled a groundbreaking solution, dated July 18, 2024, to tackle the issue of Windows host crashes caused by the Falcon Sensor. Reported symptoms indicate that hosts are encountering bug checks or blue screen errors related to the Falcon Sensor. CrowdStrike Engineering has taken immediate action by identifying a content deployment related to this issue and reverting those changes.

However, if hosts continue to crash and are unable to stay online to receive the Channel File Changes, the following steps can be used as a workaround:

1. Boot Windows into Windows Recovery Environment command prompt.

2. Navigate to the C:\Windows\System32\drivers\CrowdStrike directory.

   command: cd C:\Windows\System32\drivers\CrowdStrike

3. Delete "C-00000291*.sys”.

   command: del C-00000291*.sys

4. Boot the host normally.

This will resolve the Blue Screen of Death error.

Hope this helps, because