Windows Bluescreen resolution - applies to CrowdStrike issue if OS is local and not networked

4 months ago
317

If you have the Blue Screen of Death (BSOD) today, chances are it is because of an update from Crowdstrike Security Software for Servers and Business Computers

FAST SOLUTION:
Click See Advanced Repair Options
Click Troubleshoot
Click Command prompt and enter the following
cd\windows\system32
rstrui
Choose a date before this happened and follow the on-screen instructions.
Let the System Restore finish and it will reboot your computer and resolve the issue

SOLUTION 2 - DELETE THE Crowdstrike update file - C-00000291*.sys
If this does not work then do this:
Click See Advanced Repair Options
Click Troubleshoot
Click Command prompt and enter the following
pushd C:\Windows\System32\drivers\Crowdstrike
del “C-00000291*.sys”
exit
Click continue, system should reboot normally

ADVANCE REPAIRS - DO ALL OF THE ABOVE AND RENAME CROWDSTRIKE DIRECTORY
Click on See advanced repair options on the Recovery screen.
In the Advanced Repair Options menu, select Troubleshoot.
Next, choose Advanced options.
Select Startup Settings.
Click on Restart.
After your PC restarts, you will see a list of options. Press 4 or F4 to start your PC in Safe Mode.
Open Command Prompt in Safe Mode.
In the Command Prompt, navigate to the drivers directory: cd \windows\system32\drivers
To rename the CrowdStrike folder, use ren CrowdStrike CrowdStrike_old

IF YOU ARE USING WINDOWS 10 AND RSTRUI DOES NOT WORK THEN DISABLE ALSO THE REGISTRY THAT AUTOMATICALLY RUNS CROWDSTRIKE
Restart Windows 10. Keep hitting F8 key until the Advanced Boot Options menu appears.
Boot to the Safe mode and open Windows Registry Editor (Use Win+R to find Registry Editor).
In the Registry Editor, navigate to the following path:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CSAgent
In the CSAgent key, find the Start entry on the right pane.
Double-click on Start to edit its value.
Change the value data from 1 (which means the service is set to start automatically) to 4 (which disables the service).
Click OK to save the changes.
Close the Registry Editor and Restart

I hope this helps!
HAVE A BLESSED DAY!
*Other steps taken from: https://www.windowslatest.com/2024/07/19/windows-10-crashes-with-bsod-stuck-at-recovery-due-to-crowdstrike-update/

Loading comments...