There is a famous company that sells enterprise-grade Anti-Virus programs (called EDR) called CrowdStrike. Today (about 1 hour ago) a new patch was sent to computers around the world that have the program installed. That computers all over the world that use Windows after installing this patch come up with a blue screen (the computer shuts down). Most of them get a blue screen and can't bootloop into the computer. In some, they get a blue screen and then they can continue using it.

It should be popular news today 💀 The blue screen message indicates a Driver named csagent.sys which belongs to CrowdStrike itself.

Who got it?

Basic solution: Boot into Safe Mode of Windows and move the folder. C:\windows\system32\drivers\crowdstrike\ (but this fix It is expected that the EDR will be disabled. You may need to consult with the relevant parties before proceeding!)

#crowdstrike #window

image