The worldwide outage of CroudStrike happened today with millions of PC with the BSOD caused by csagent.sys.

Resolve immediately as follow:

  • Boot the computer in safe mode or open the command prompt in the recovery environment
  • Rename the folder C:\Windows\System32\drivers\CrowdStrike in CrowdStrike.old
  • Reboot the system in normal mode

cd C:\Windows\System32\drivers
ren CrowdStrike CrowdStrike.old

Official Workaround Steps:

  • Boot Windows into Safe Mode or the Windows Recovery Environment
  • Navigate to the C:\Windows\System32\drivers\CrowdStrike directory
  • Locate the file matching “C-00000291*.sys”, and delete it.
  • Boot the host normally.

Leave A Comment