Massive CrowdStrike outage: How to recover your affected Microsoft Windows devices

A widespread outage affecting Microsoft Windows devices, caused by a faulty CrowdStrike software update, has left many users struggling with the infamous “Blue Screen of Death” (BSOD). If your device has been impacted by this Microsoft and CrowdStrike outage issue, there are several steps you can take to recover your system and get back online. This guide will walk you through the process of fixing your affected Windows device.

The global CrowdStrike outage

The problem stems from a recent CrowdStrike Falcon platform update that conflicted with Windows systems, causing widespread disruptions. While CrowdStrike has already deployed a fix, some systems may take time to recover automatically. If your Windows device is still experiencing issues, you can take matters into your own hands with the following steps to address this CrowdStrike outage.

Recovery steps for personal devices

If your personal Windows devices happen to be affected by the Microsoft and CrowdStrike outage, there is something you can do about it. As noted in an official statement by CrowdStrike, here are the steps you need to take to fix the problem.

1. Attempt a simple reboot: First, try restarting your computer. Some users have reported success in resolving the issue with a simple reboot. If this doesn’t work, proceed to the more advanced steps.
2. Boot into Safe Mode or Windows Recovery Environment (WinRE): If your device continues to crash, you’ll need to boot into Safe Mode or the Windows Recovery Environment. To do this: Restart your computer and as it’s booting up, press the F8 key repeatedly until you see the Advanced Boot Options menu. Select “Safe Mode” or “Safe Mode with Networking.”
3. Navigate to the CrowdStrike directory: Once in Safe Mode, open File Explorer and navigate to: C:\Windows\System32\drivers\CrowdStrike If you’re using the Windows Recovery Environment, the path might be slightly different.
4. Delete the problematic file: In the CrowdStrike directory, look for a file named C-00000291*.sys. This is the faulty driver causing the issue. Delete this file.
5. Reboot normally: After deleting the file, restart your computer and boot normally. Your device should now function without crashing.

Things to keep in mind

1. BitLocker encryption: If your device is encrypted with BitLocker, you may need a recovery key to access your files in Safe Mode.
2. Multiple reboots: Some users have reported success after multiple reboots, which may allow the device to download the CrowdStrike fix before the protection engine triggers a BSOD.
3. Wired connection: If possible, use a wired network connection instead of Wi-Fi when attempting these steps, as it can help with the remediation process.

What if these steps don’t work?

If you’re still experiencing issues after following these steps, it’s advisable to contact your IT department or a professional technician. The recovery process can be complex, especially for those without advanced technical knowledge.

Preventing future issues

To minimize the risk of similar problems in the future:

1. Regularly back up your important data.
2. Keep your operating system and security software up to date.
3. Consider using system restore points before major updates.

While this outage has caused significant disruptions, following these steps should help most users recover their affected Windows devices. Remember to exercise caution when modifying system files and, if in doubt, seek professional assistance.