posted on Jul, 19 2024 @ 05:15 AM
For any IT folks having the issues, so far the following fix from crowdstrike has been working for us. Some others at our company, have been
rebooting several times in order for their machines staying connected long enough to get the reverted update.
Tech Alert | Windows crashes related to Falcon Sensor | 2024-07-19 (crowdstrike.com)
-----------------------------------------------------
Summary
CrowdStrike is aware of reports of crashes on Windows hosts related to the Falcon Sensor.
Details
Symptoms include hosts experiencing a bugcheckblue screen error related to the Falcon Sensor.
This issue is not impacting Mac- or Linux-based hosts
Channel file "C-00000291*.sys" with timestamp of 0527 UTC or later is the reverted (good) version.
Current Action
CrowdStrike Engineering has identified a content deployment related to this issue and reverted those changes.
If hosts are still crashing and unable to stay online to receive the Channel File Changes, the following steps can be used to workaround this
issue:
Workaround Steps:
Reboot the host to give it an opportunity to download the reverted channel file. If the host crashes again, then:
Boot Windows into Safe Mode or the Windows Recovery Environment
Navigate to the C:WindowsSystem32driversCrowdStrike directory
Locate the file matching “C-00000291*.sys”, and delete it.
Boot the host normally.
Note: Bitlocker-encrypted hosts may require a recovery key.
Latest Updates
2024-07-19 05:30 AM UTC | Tech Alert Published.
2024-07-19 06:30 AM UTC | Updated and added workaround details.
2024-07-19 08:08 AM UTC | Updated
Support
Find answers and contact Support with our Support Portal
Was this helpful?YesNoCreate Case