Global IT outages due to Crowdstrike got the whole world shook up (The FAA has grounded flights from Delta, United and AA)

[jdubnyce]

Cancelled my food delivery yesterday, got a refund, breh delivered it this morning

Now he gon eat that cost

Free food

 

[Toe Jay Simpson]

There is a workaround to fix a machine that does not boot up. I haven't tested this myself since I am not impacted.

1. Boot Windows into Safe Mode or Recovery Environment
2. Navigate to C:\Windows\System32\drivers\CrowdStrike directory
3. Locate the file matching "C-00000291*.sys", and delete it.
4. Boot the host normally.

Oh this is a nightmare. Some wise guy who “is good with computers” gonna take it on himself to fix everybody’s computer in the office and tear up everything

 

[The God Poster]

It's a 5 minute fix. It's just getting a technician to do it be the biggest issue since many organizations don't have the man power.

even for remote work? I’m actually logged in but can’t access the vpn

 

[jdubnyce]

There is a workaround to fix a machine that does not boot up. I haven't tested this myself since I am not impacted.

1. Boot Windows into Safe Mode or Recovery Environment
2. Navigate to C:\Windows\System32\drivers\CrowdStrike directory
3. Locate the file matching "C-00000291*.sys", and delete it.
4. Boot the host normally.

This can't be done remote though, right?

 

[jdubnyce]

Oh this is a nightmare. Some wise guy who “is good with computers” gonna take it on himself to fix everybody’s computer in the office and tear up everything

More chaos
I welcome this

 

[Paper Boi]

anyone actually experienced POS systems not working for cards yet? need to go pick up a few things at the store but don’t want to waste my time if shyt is gonna be down.

 

[xXMASHERXx]

Wonder if this story will get my company to finally invest in a real test environment.

 

[JerkPork]

even for remote work? I’m actually logged in but can’t access the vpn

If you have a machine that doesn't boot, those steps should get your machine running again.

But you might not be able to work efficiently even after that if your company has servers that are down.

 

[jdubnyce]

What is it with July and fukkery

 

[Lord Beasley]

They gonna get sued into oblivion.

That crigga on the right looks like a full fledged grifter. Who told them that suit was appropriate in 2024???

 

[JerkPork]

This can't be done remote though, right?

No.

 

[Adonai]

Fix for nikkas cooked by bitlocker.

1. Cycle through BSODs until you get the recovery screen.
2. Navigate to Troubleshoot>Advanced Options> Startup Settings
3. Press "Restart"
4. Skip the first Bitlocker recovery key prompt by pressing Esc
5. Skip the second Bitlocker recovery key prompt by selecting Skip This Drive in the bottom right
6. Navigate to Troubleshoot> Advanced Options> Command Prompt
7. Type "bcdedit/set {default) safeboot minimal", then press enter.
8. Go back to the WinRE main menu and select Continue.
9. It may cycle 2-3 times.
10. If you booted into safe mode, log in per normal.
11. Open Windows Explorer, navigate to C:\Windows \System32\drivers\Crowdstrike
12. Delete the offending file (STARTS with C-00000291*, sys file extension)
13. Open command prompt (as administrator)
14. Type "bcdedit /deletevalue (default) safeboot*, then press enter.
15. Restart as normal, confirm normal behavior.

 

[Bugzbunny129]

Fix for nikkas cooked by bitlocker.

1. Cycle through BSODs until you get the recovery screen.
2. Navigate to Troubleshoot>Advanced Options> Startup Settings
3. Press "Restart"
4. Skip the first Bitlocker recovery key prompt by pressing Esc
5. Skip the second Bitlocker recovery key prompt by selecting Skip This Drive in the bottom right
6. Navigate to Troubleshoot> Advanced Options> Command Prompt
7. Type "bcdedit/set {default) safeboot minimal", then press enter.
8. Go back to the WinRE main menu and select Continue.
9. It may cycle 2-3 times.
10. If you booted into safe mode, log in per normal.
11. Open Windows Explorer, navigate to C:\Windows \System32\drivers\Crowdstrike
12. Delete the offending file (STARTS with C-00000291*, sys file extension)
13. Open command prompt (as administrator)
14. Type "bcdedit /deletevalue (default) safeboot*, then press enter.
15. Restart as normal, confirm normal behavior.

Cant see , BSOD

 

[beenz]

crowd strike stock price already down 40 points ten minutes into trading

 

[Toe Jay Simpson]

What is it with July and fukkery

This might be the greatest July ever. Matter fact, it already is