On: CrowdStrike Update: Windows Bluescreen and Boot Lo...

[woodylondon]

CyberStrike offers a temporary solution for crashed systems Cyberstike has given users a potential way to fix their systems.

Boot Windows into Safe Mode or the Windows Recovery Environment (you can do that by holding down the F8 key before the Windows logo flashes on screen) Navigate to the C:WindowsSystem32driversCrowdstrike directory Locate the file matching “C-00000291.sys” file, right click and rename it to “C-00000291.renamed” Boot the host normally.

[moxli → woodylondon]

Source for me was a reddit comment: https://www.reddit.com/r/crowdstrike/comments/1e6vmkf/commen...

[rosege → woodylondon]

fun doing that on thousands of machines

[steve1977 → rosege]

It's easy, the users can do it themselves. Just send them an e-mail with the inst... oh wait...

[junto → steve1977]

One of the downsides of WFH. How do you contact your IT support via Microsoft Teams when you don’t have your laptop or Microsoft Teams.

[steve1977 → junto]

Yup. Well in our case (and we are thankfully not affected), they could call IT support. But then again, if IT support themselves cannot boot their PCs...

[oldmanyells68 → woodylondon]

Great. now I'll do this 10,000 times.

[0x1ceb00da → oldmanyells68]

Practice makes a man perfect.