Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This is the fix: Current fix is to boot into safe mode and change the name of the CrowdStrike folder in c:\windows\system32\drivers\Crowdstrike

Workaround Steps: 1. Boot Windows into Safe Mode or the Windows Recovery Environment 2. Navigate to the C:\Windows\System32\drivers\CrowdStrike directory 3. Locate the file matching “C-00000291*.sys”, and delete it. 4. Boot the host normally.



This is manual method how to do it in one go for whole organisation


I think that is the method.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: