CrowdStrike Falcon agents are imploding right now and causing a Blue Screen of Death boot loop on every endpoint. Reports of massive outages globally.
reddit.com/r/crowdstrike/…
reddit.com/r/crowdstrike/…
I'd love to be able to see their messaging, but it is behind a login.
Presumably the status update is just "we are aware", but no further details of what is wrong/how to remediate/etc.
Something (don't know what) is wrong with their csagent.sys driver file.
I don't have a CrowdStrike box & cannot personally validate, but I hear renaming the driver folder path is a workaround:
Rename-Item "C:\Windows\System32\drivers\Crowdstrike" "Crowdstrike.bandaid"
I don't have a CrowdStrike box & cannot personally validate, but I hear renaming the driver folder path is a workaround:
Rename-Item "C:\Windows\System32\drivers\Crowdstrike" "Crowdstrike.bandaid"
To make sure this thread has the most current detail (as I see this one is seemingly getting the most traction), on a previous comment we saw Brody from CrowdStrike chime in with a better/more accurate workaround than just renaming the driver folder path:
https://x.com/_JohnHammond/status/1814188265756393698
Boot into Safe Mode, "Advanced Startup" with Command Prompt, and use this command to remove faulty channel files:
del "C:\Windows\System32\drivers\CrowdStrike\C-00000291*.sys"
This is a better choice than changing the folder name for the CrowdStrike driver, but as always, YMMV.
del "C:\Windows\System32\drivers\CrowdStrike\C-00000291*.sys"
This is a better choice than changing the folder name for the CrowdStrike driver, but as always, YMMV.
If you have some morbid curiosity and want to see how this nerdy computer shiz actually affects the real world meat space, here is an absolutely wild thread from @CyFi10 on spots that are seen to be affected so far:
https://x.com/CyFi10/status/1814188996471493050
• • •
Missing some Tweet in this thread? You can try to
force a refresh
