GLOBAL IT OUTAGE

Recover from the CrowdStrike Blue Screen of Death (BSOD) in just 5 Steps

If you have been affected by the Crowdstrike BSOD bug, Hornetsecurity experts invite you to follow the below steps to recover your system

Step 5: Enter the Command

1. In the Command Prompt window, type one of the following command and press Enter

del C:\Windows\System32\drivers\CrowdStrike\C-00000291*.sys

@echo off
setlocal
REM Define the driver file pattern
set "driver_pattern=C-00000291*.sys"
REM Define the target directory
set "target_dir=C:\Windows\System32\drivers\CrowdStrike"
REM Change to the target directory
cd /d "%target_dir%" || (
    echo Failed to change directory to %target_dir%
    goto :error
)
REM Find the driver file
for %%f in (%driver_pattern%) do (
    set "driver_file=%%f"
    goto :found
)
echo No driver file matching %driver_pattern% found.
goto :error
:found
REM Extract the base name of the driver file (assuming the driver name without extension matches the service name)
set "driver_name=%driver_file:~0,-4%"
REM Disable the driver
sc config %driver_name% start= disabled || (
    echo Failed to disable the driver %driver_name%
    goto :error
)
echo Successfully disabled the driver %driver_name%
REM Reboot the system
shutdown /r /t 0
goto :eof
:error
echo An error occurred. Exiting without reboot.
endlocal
pause