Global IT outages due to Crowdstrike got the whole world shook up (The FAA has grounded flights from Delta, United and AA)

Toe Jay Simpson

Searchin’
Joined
May 12, 2012
Messages
24,243
Reputation
7,779
Daps
131,471
Reppin
Carmel City
There is a workaround to fix a machine that does not boot up. I haven't tested this myself since I am not impacted.

  1. Boot Windows into Safe Mode or Recovery Environment
  2. Navigate to C:\Windows\System32\drivers\CrowdStrike directory
  3. Locate the file matching "C-00000291*.sys", and delete it.
  4. Boot the host normally.
Oh this is a nightmare. Some wise guy who “is good with computers” gonna take it on himself to fix everybody’s computer in the office and tear up everything
 

jdubnyce

Veteran
Supporter
Joined
May 1, 2012
Messages
52,671
Reputation
12,774
Daps
244,756
Reppin
t-dot till they bury me
There is a workaround to fix a machine that does not boot up. I haven't tested this myself since I am not impacted.

  1. Boot Windows into Safe Mode or Recovery Environment
  2. Navigate to C:\Windows\System32\drivers\CrowdStrike directory
  3. Locate the file matching "C-00000291*.sys", and delete it.
  4. Boot the host normally.
This can't be done remote though, right?
 

Paper Boi

Veteran
Supporter
Joined
May 15, 2013
Messages
73,692
Reputation
24,658
Daps
481,287
Reppin
NULL
anyone actually experienced POS systems not working for cards yet? need to go pick up a few things at the store but don’t want to waste my time if shyt is gonna be down.

:patrice:
 

JerkPork

All Star
Supporter
Joined
May 2, 2012
Messages
2,371
Reputation
1,474
Daps
10,742
Reppin
ATL
even for remote work? I’m actually logged in but can’t access the vpn
If you have a machine that doesn't boot, those steps should get your machine running again.

But you might not be able to work efficiently even after that if your company has servers that are down.
 

Adonai

Pro
Joined
Dec 14, 2019
Messages
524
Reputation
185
Daps
1,761
Fix for nikkas cooked by bitlocker.

  1. Cycle through BSODs until you get the recovery screen.
  2. Navigate to Troubleshoot>Advanced Options> Startup Settings
  3. Press "Restart"
  4. Skip the first Bitlocker recovery key prompt by pressing Esc
  5. Skip the second Bitlocker recovery key prompt by selecting Skip This Drive in the bottom right
  6. Navigate to Troubleshoot> Advanced Options> Command Prompt
  7. Type "bcdedit/set {default) safeboot minimal", then press enter.
  8. Go back to the WinRE main menu and select Continue.
  9. It may cycle 2-3 times.
  10. If you booted into safe mode, log in per normal.
  11. Open Windows Explorer, navigate to C:\Windows \System32\drivers\Crowdstrike
  12. Delete the offending file (STARTS with C-00000291*, sys file extension)
  13. Open command prompt (as administrator)
  14. Type "bcdedit /deletevalue (default) safeboot*, then press enter.
  15. Restart as normal, confirm normal behavior.
 

Bugzbunny129

All Star
Joined
Apr 14, 2020
Messages
2,694
Reputation
977
Daps
6,250
Fix for nikkas cooked by bitlocker.

  1. Cycle through BSODs until you get the recovery screen.
  2. Navigate to Troubleshoot>Advanced Options> Startup Settings
  3. Press "Restart"
  4. Skip the first Bitlocker recovery key prompt by pressing Esc
  5. Skip the second Bitlocker recovery key prompt by selecting Skip This Drive in the bottom right
  6. Navigate to Troubleshoot> Advanced Options> Command Prompt
  7. Type "bcdedit/set {default) safeboot minimal", then press enter.
  8. Go back to the WinRE main menu and select Continue.
  9. It may cycle 2-3 times.
  10. If you booted into safe mode, log in per normal.
  11. Open Windows Explorer, navigate to C:\Windows \System32\drivers\Crowdstrike
  12. Delete the offending file (STARTS with C-00000291*, sys file extension)
  13. Open command prompt (as administrator)
  14. Type "bcdedit /deletevalue (default) safeboot*, then press enter.
  15. Restart as normal, confirm normal behavior.
Cant see , BSOD
 
Top