Many companies internationally use a version of Windows that has an agent Falcon Sensor by CrowdStrike, a system that is able to monitor the activity of your work networks and which acts as an important attack prevention system. It is a cornerstone of these companies’ security and is entirely up to said company, not Microsoft, to maintain.

Banks, airlines, TV channels and many other companies use Falcon Sensor on Windows in their daily lives, but this morning something went terribly wrong. CrowdStrike released an update for the Falcon Sensor that was flawed and broke Windows, eventually causing a domino effect that brought down the computer systems of hundreds of companies on a global level.

This is a very serious problem because creates a blue screen of death which prevent the use of the affected device and which had a large impact. In Spain, the list of affected companies is long and includes such important names as Aena and Repsol, among others. Overseas, an employee of a Malaysian firm confirmed that 70% of its laptops had fallen, laughingly saying it would “destroy” someone.

What CrowdStrike does

The company recognized the problem and explained that it is suspected to be due to a bad update that was released last morning. To solve this problem they returned the updatebut this will only prevent new computers from being installed and will not repair systems that have already been affected.

It goes without saying that these problems are a big headache for companies and for IT administrators, who in this type of situation have to waste a lot of time trying to figure out where the problem could be coming from until I finally recognized the source. publicly as it were. Also It can cost affected companies a lot of money.

If your company is affected by this update, I can confirm that we already have a known solution that works, but it has to be applied manually on each of the computers. This is not difficult for a company that has several PCs, but when we talk about managed IT services hundreds or even thousands of computers things are changing.

How to restart Windows after this failed update

Follow these steps to resolve issues caused by CrowdStrike updates:

• We start Windows in safe mode or in the System Recovery environment.
• We go to the path C:\Windows\System32\drivers\CrowdStrike Directory.
• Find the file C-00000291*.sys” and delete it.
• We restart and start the system normally.

AI generated images.