How To Fix Microsoft Crowdstrike Falcon Sensor PC Crashing

If your Windows PC crashed unexpectedly it is very likely that you have been affected by Microsoft Crowdstrike crash. According to this problem, it affects computers around the world and is related to an issue with the CrowdStrike Falcon sensor.

This issue is causing a Blue Screen of Death (BSOD) on Windows systems, resulting in a complete outage. But don't worry, here is a guide so you can solve it:

How To Fix Microsoft Crowdstrike Falcon Sensor PC Crashing

Understanding the Issue:

A recent update to the CrowdStrike Falcon sensor has been identified as the cause of system crashes on some Windows machines. CrowdStrike has released a fix, but it may not be automatically deployed to all devices immediately.

Resolving the Crash:

Here's how to address the issue and prevent further crashes:

1. Booting into Safe Mode:

Restart your PC and hold down the F8 key repeatedly during the boot process. This should bring up the Advanced Boot Options menu.

Select Safe Mode from the available options.

Alternatively:

If the F8 key doesn't work, you can access Safe Mode through the Windows Recovery Environment.

Restart your PC and hold down the appropriate key combination to enter the recovery environment (consult your device's documentation for specific instructions).

Once in the recovery environment, navigate to "Repair Your Computer", then "Troubleshoot" > "Advanced options" > "Startup Settings" > "Restart."

Your PC will restart with additional boot options. Choose Safe Mode.

2. Running the Command Prompt:

Once in Safe Mode, right-click on the Start button and select "Command Prompt (Admin)".

This will open the Command Prompt window with administrator privileges.

3. Navigating to the Required Directory:

In the Command Prompt window, type the following command and press Enter:

cd C:\Windows\System32\drivers\CrowdStrike

This command navigates you to the directory containing the CrowdStrike Falcon sensor files.

4. Deleting the Corrupted File:

The specific file causing the crashes might have a filename starting with "C-00000291" followed by an extension (e.g., .sys).

Use the following command to delete the file:

del C-00000291*.sys

This command will delete any file starting with "C-00000291" in the current directory.

5. Rebooting the System:

After deleting the corrupted file, safely reboot your PC. The system crashes caused by the CrowdStrike Falcon sensor should be resolved.

Additional Considerations:

Network Connection: For a smoother fix process, it's recommended to connect your PC to a wired network before proceeding.

Alternative Method: If booting into Safe Mode is not feasible, CrowdStrike offers an alternative recovery tool method. Please refer to their website for details: https://www.crowdstrike.com/services/respond/endpoint-recovery/

Backups: It's always advisable to have a recent backup of your system before making any significant changes.

Disclaimer: The information provided here is based on publicly available resources. If you require further assistance or have concerns, consider consulting an IT professional.

With these steps, you should be able to resolve system crashes caused by the CrowdStrike Falcon sensor. If the issue persists, please contact CrowdStrike support for further assistance.