Crowdstrike x Microsoft Blue Screen Collab Fix

Experiencing a Blue Screen of Death (BSOD) can be a nightmare for any computer user, and when it’s caused by a security software update, the frustration can be even more significant. Recently, a CrowdStrike update has led to BSOD issues for many users. Fortunately, there’s a straightforward solution to this problem. Follow these steps to fix the CrowdStrike/BSOD issue and get your system back to normal.

Step 1: Boot Windows into Safe Mode or the Windows Recovery Environment
The first step is to boot your computer into Safe Mode or the Windows Recovery Environment. This will allow you to access your system without loading all drivers, making it easier to remove the problematic file. Here’s how to do it:

For Safe Mode:

Restart your computer.
As it starts booting, repeatedly press the F8 key (for older versions of Windows) or hold the Shift key and click Restart (for Windows 10/11).
Select “Safe Mode” from the options presented.
For Windows Recovery Environment:

Restart your computer.
If Windows fails to start, it will automatically boot into the Windows Recovery Environment. If not, you can manually enter it by holding the Shift key and selecting Restart from the Start menu.
Navigate to “Troubleshoot” > “Advanced options” > “Startup Settings” > “Restart”.
Press F4 to boot into Safe Mode.

Step 2: Navigate to the CrowdStrike Drivers Directory
Once you are in Safe Mode or the Windows Recovery Environment:

Open File Explorer.
Navigate to the following directory: C:\Windows\System32\drivers\CrowdStrike.

Step 3: Locate and Delete the Problematic File
Within the CrowdStrike directory, you need to locate and delete the file causing the BSOD issue:

Look for a file that matches the pattern “C-00000291*.sys”. The asterisk (*) indicates that the filename may have additional characters.
Once you locate the file, right-click on it and select “Delete”. If prompted for administrator permission, click “Continue” or enter your admin credentials.

Step 4: Boot the Host Normally
After deleting the problematic file:

Exit Safe Mode or the Windows Recovery Environment by restarting your computer.
Allow your system to boot normally.
Your system should now boot without encountering the BSOD caused by the CrowdStrike update.

Dealing with BSOD issues can be daunting, especially when caused by security software intended to protect your system. By following these steps, you can resolve the issue and restore your computer to normal operation. If you continue to experience problems, consider reaching out to CrowdStrike support or your IT department for further assistance.

Stay safe and keep your system running smoothly!