Global IT outages due to Crowdstrike got the whole world shook up (The FAA has grounded flights from Delta, United and AA)

Toe Jay Simpson

Searchin’
Joined
May 12, 2012
Messages
25,141
Reputation
8,645
Daps
136,777
Reppin
Carmel City
There is a workaround to fix a machine that does not boot up. I haven't tested this myself since I am not impacted.

  1. Boot Windows into Safe Mode or Recovery Environment
  2. Navigate to C:\Windows\System32\drivers\CrowdStrike directory
  3. Locate the file matching "C-00000291*.sys", and delete it.
  4. Boot the host normally.
Oh this is a nightmare. Some wise guy who “is good with computers” gonna take it on himself to fix everybody’s computer in the office and tear up everything
 

jdubnyce

Veteran
Supporter
Joined
May 1, 2012
Messages
55,060
Reputation
14,287
Daps
255,245
Reppin
t-dot till they bury me
There is a workaround to fix a machine that does not boot up. I haven't tested this myself since I am not impacted.

  1. Boot Windows into Safe Mode or Recovery Environment
  2. Navigate to C:\Windows\System32\drivers\CrowdStrike directory
  3. Locate the file matching "C-00000291*.sys", and delete it.
  4. Boot the host normally.
This can't be done remote though, right?
 

Paper Boi

Veteran
Supporter
Joined
May 15, 2013
Messages
74,531
Reputation
25,637
Daps
485,609
Reppin
NULL
anyone actually experienced POS systems not working for cards yet? need to go pick up a few things at the store but don’t want to waste my time if shyt is gonna be down.

:patrice:
 

JerkPork

All Star
Supporter
Joined
May 2, 2012
Messages
2,381
Reputation
1,474
Daps
10,773
Reppin
ATL
even for remote work? I’m actually logged in but can’t access the vpn
If you have a machine that doesn't boot, those steps should get your machine running again.

But you might not be able to work efficiently even after that if your company has servers that are down.
 

Adonai

Pro
Joined
Dec 14, 2019
Messages
587
Reputation
201
Daps
2,250
Fix for nikkas cooked by bitlocker.

  1. Cycle through BSODs until you get the recovery screen.
  2. Navigate to Troubleshoot>Advanced Options> Startup Settings
  3. Press "Restart"
  4. Skip the first Bitlocker recovery key prompt by pressing Esc
  5. Skip the second Bitlocker recovery key prompt by selecting Skip This Drive in the bottom right
  6. Navigate to Troubleshoot> Advanced Options> Command Prompt
  7. Type "bcdedit/set {default) safeboot minimal", then press enter.
  8. Go back to the WinRE main menu and select Continue.
  9. It may cycle 2-3 times.
  10. If you booted into safe mode, log in per normal.
  11. Open Windows Explorer, navigate to C:\Windows \System32\drivers\Crowdstrike
  12. Delete the offending file (STARTS with C-00000291*, sys file extension)
  13. Open command prompt (as administrator)
  14. Type "bcdedit /deletevalue (default) safeboot*, then press enter.
  15. Restart as normal, confirm normal behavior.
 

Bugzbunny129

All Star
Joined
Apr 14, 2020
Messages
3,003
Reputation
1,251
Daps
7,116
Fix for nikkas cooked by bitlocker.

  1. Cycle through BSODs until you get the recovery screen.
  2. Navigate to Troubleshoot>Advanced Options> Startup Settings
  3. Press "Restart"
  4. Skip the first Bitlocker recovery key prompt by pressing Esc
  5. Skip the second Bitlocker recovery key prompt by selecting Skip This Drive in the bottom right
  6. Navigate to Troubleshoot> Advanced Options> Command Prompt
  7. Type "bcdedit/set {default) safeboot minimal", then press enter.
  8. Go back to the WinRE main menu and select Continue.
  9. It may cycle 2-3 times.
  10. If you booted into safe mode, log in per normal.
  11. Open Windows Explorer, navigate to C:\Windows \System32\drivers\Crowdstrike
  12. Delete the offending file (STARTS with C-00000291*, sys file extension)
  13. Open command prompt (as administrator)
  14. Type "bcdedit /deletevalue (default) safeboot*, then press enter.
  15. Restart as normal, confirm normal behavior.
Cant see , BSOD
 
Top