Mahesh Adsure’s Post

🚨 URGENT FIX FOR WINDOWS OUTAGE!🚨 If you're dealing with the Blue Screen of Death (BSOD) due to the csagent.sys driver issue, follow these quick steps to resolve it and get back on track: 1. Restart and Boot into Troubleshooting Mode   - Restart your computer.   - Press and hold the `Shift` key and repeatedly tap the `F8` key to enter Troubleshooting mode. 2. Open Command Prompt   - Navigate to Advanced Options and select "Command Prompt." 3. Navigate to the CrowdStrike Drivers Folder   - Type `cd C:\Windows\System32\drivers\CrowdStrike` and press Enter. 4. Locate and Delete/Rename the Problematic Driver File   - Type `dir` to list files in the directory.   - Find the file matching "C-00000291*.sys".   - Delete it using `del C-00000291*.sys` or rename it to `donotcrash.sys`. 5. Restart Your Computer   - Close Command Prompt and restart your computer normally. This urgent fix can help businesses and individuals experiencing this critical issue. Please share this post to help others resolve their Windows outage quickly! #WindowsOutage #BSOD #TechSupport #CrowdStrike #QuickFix #TechTips #ITSupport #UrgentFix #Windows10 #Windows11 #LinkedInTech #Productivity

🚨 Major Outage Alert: CrowdStrike Agent Disruption 🚨 Windows 10 users worldwide are experiencing a significant outage due to a recent CrowdStrike update. This issue has led to PCs being stuck on the recovery screen, displaying the message: "It looks like Windows didn’t load correctly. If you’d like to restart and try again, choose Restart my PC below." Here’s a quick workaround to get your system back up and running: 🔧 Steps to Resolve: 1. Restart Windows and boot into Troubleshooting mode. 2. Open a command prompt. 3. Navigate to C:\Windows\System32\drivers\CrowdStrike. 4. Rename the file CSAgent.sys to something else, for example, donotcrash.sys. 5. Continue with a normal startup. Stay safe and share this fix to help others affected by this issue! Rest assured, a global resolution is in the works and this issue will be resolved soon. #Windows10 #CrowdStrike #TechUpdate #SystemRecovery #ITSupport #TechAlert #SecurityAwareness #FalconPlatform #TechTrends #CrowdStrikeFalcon

🚨 Windows Recovery Issue: Quick and Effective Solutions! 🚨 Encountered a blue screen on my PC this morning with the message: “It looks like Windows didn’t load correctly.” This hiccup can be alarming for any professional heavily relying on a functional computer. Here are some key points to consider: 🔒 Key Points: - This issue may stem from updates, driver problems, or system file corruption. - Back up important files and create system restore points regularly to safeguard against unexpected issues. - Ensure your system and drivers are up to date. 👩💻 Action Steps for Impacted Users: 1. Restart Your PC: Click on “Restart my PC” as a quick resolution for minor glitches. 2. Advanced Repair Options: If restarting fails, try these steps: - System Restore: Revert your PC to a previous working state. - Startup Repair: Fix common startup issues. - Command Prompt: Run commands like sfc /scannow or DISM.exe for repairs. - Uninstall Updates: Remove recent updates causing the problem. - Rebuild BCD: Fix Boot Configuration Data by using specific commands like bootrec /fixmbr. Stay proactive and resolve Windows recovery issues efficiently! #WindowsRecovery #TechSolutions 🖥💡

Crowdstrike Falcon Crisis Workaround Steps for Individual Hosts: 1. Reboot the Host: • Connect the host to a wired network (ethernet) for faster internet connectivity. • Reboot the host to allow it to download the reverted channel file. 2. If the Host Crashes Again: a. Boot into Safe Mode or Windows Recovery Environment: • Connect the host to a wired network (ethernet) for faster internet connectivity. • Use “Safe Mode with Networking” for easier remediation. b. Navigate to the CrowdStrike Directory: • For Windows: • Navigate to %WINDIR%\System32\drivers\CrowdStrike. • For Windows Recovery Environment/Preinstallation Environment (WinRE/WinPE): • Navigate to Windows\System32\drivers\CrowdStrike on the OS volume. c. Delete the Specific File: • Locate the file matching the pattern C-00000291*.sys. • Delete this file. d. Boot the Host Normally: • Reboot the host normally. 3. Note: • For BitLocker-encrypted hosts, you may need to provide the recovery key. These steps should help in resolving the issue with the host crashing due to the problematic channel file. #crowdstrike #falcon #DIY##microsoft #systemrecovery

Tech Alert | Windows crashes related to Crowdstrike Falcon Sensor | 2024-07-19 Summary - CrowdStrike is aware of reports of crashes on Windows hosts related to the Falcon Sensor. Details - Symptoms include hosts experiencing a bugcheck\blue screen error related to the Falcon Sensor. Current Action - CrowdStrike Engineering has identified a content deployment related to this issue and reverted those changes. - If hosts are still crashing and unable to stay online to receive the Channel File Changes, the following steps can be used to workaround this issue: Workaround Steps: - Boot Windows into Safe Mode or the Windows Recovery Environment - Navigate to the C:\Windows\System32\drivers\CrowdStrike directory - Locate the file matching “C-00000291*.sys”, and delete it.  - Boot the host normally. Latest Updates - 2024-07-19 05:30 AM UTC | Tech Alert Published. - 2024-07-19 06:30 AM UTC | Updated and added workaround details. Support Find answers and contact Support with our Support Portal #crowdstrike #bluescreen #error #BSOD

The whole world is struggling with outages of Windows 10 systems running CrowdStrike. Here’s a quick guide to temporarily work around the problem: Instructions 1: 1/ We boot the system into Safe Mode CMD (hold F8 at startup) 1a/ We unlock Bitlocker 1b/ Log in as a local admin 2/ Switch to the incriminated folders using: cd C:\windows\system32\drivers 3/ we rename the CrowdStrike file to attribute _old: ren CrowdStrike CrowdStrike_old 4/ We restart the computer. Instruction 2: 1/ We boot the system into Safe Mode CMD – Rescue mode Command line (hold F8 at startup) 1a/ We unlock Bitlocker 1b/ Log in as a local admin 2/ Switch to the offending folders using: cd C:\Windows\System32\drivers\CrowdStrike 3/ We find the files named C-00000291.sys: dir C-00000291.sys 4/ Delete them all using: del C-00000291*.sys 5/ We restart the computer This will allow you to start the system, however, it is disabled from the operation of this service. c #cyberpandemic #crowdstrike

A recent software update from #CrowdStrike caused widespread system crashes for #Microsoft Windows-based workstations and servers, leading to major disruptions. Manual intervention is required on each system to correct it. The following steps can be used to work around this issue: 🔄 Boot Windows into Safe Mode or the Windows Recovery Environment. 📁 Use File Explorer to navigate to the C:\Windows\System32\drivers\CrowdStrike directory. 🗑️ Locate the file matching 'C-0000029*.sys' and delete it. 🔄 Reboot the host normally. For ITS clients with machines protected by BitLocker, you may be prompted to enter an encryption key; if so, please contact the ITS help desk directly for assistance. If you need any additional assistance with these instructions, please contact the ITS help desk directly at helpdesk@itsolutions-inc.com or 215-886-7166. Please be aware that there may be delays and longer wait times than usual due to the high volume of support requests.

Urgent Update: 7/18/24 10:20PM PT - Hello everyone - We have widespread reports of BSODs on windows hosts, occurring on multiple sensor versions. Investigating cause. TA will be published shortly. Pinned thread. SCOPE: EU-1, US-1, US-2 and US-GOV-1 Edit 10:36PM PT - TA posted: https://lnkd.in/g5d9guFU Edit 11:27 PM PT: CrowdStrike Engineering has identified a content deployment related to this issue and reverted those changes. Workaround Steps: 1. ⁠Boot Windows into Safe Mode or the Windows Recovery Environment 2. ⁠Navigate to the C:\Windows\System32\drivers\CrowdStrike directory 3. ⁠Locate the file matching “C-00000291*.sys”, and delete it. 4. ⁠Boot the host normally. Source: Partner Azrak.ca #crowdstrike #update #windows

Tech Alert | Windows crashes related to Falcon Sensor | 2024-07-19 Summary CrowdStrike is aware of reports of crashes on Windows hosts related to the Falcon Sensor. Details Symptoms include hosts experiencing a bugcheck\blue screen error related to the Falcon Sensor. Current Action CrowdStrike Engineering has identified a content deployment related to this issue and reverted those changes. If hosts are still crashing and unable to stay online to receive the Channel File Changes, the following steps can be used to workaround this issue: Workaround Steps: 1. Boot Windows into Safe Mode or the Windows Recovery Environment 2. Navigate to the C:\Windows\System32\drivers\CrowdStrike directory 3. Locate the file matching “C-00000291*.sys”, and delete it. 4. Boot the host normally.