CrowdStrike has identified a Channel File in the update as the culprit for… | 94 comments

CrowdStrike identified a specific file, “C-00000291*.sys”, in a recent update as the cause of a global IT outage. Users can address this issue by booting Windows into Safe Mode or the Windows Recovery Environment, navigating to the C:WindowsSystem32driversCrowdStrike directory, deleting the problematic file, and then rebooting the host normally. This solution allows users to retain the Falcon Sensor update while resolving the outage. Further details and workaround steps are available on the CrowdStrike blog.

Opens on The Cyber Security Hub