Red Hot Cyber

Cybersecurity is about sharing. Recognize the risk, combat it, share your experiences, and encourage others to do better than you.
Search

Microsoft releases USB tool to fix CrowdStrike BSOD problem on Windows 10 and 11

Redazione RHC : 23 July 2024 12:13

Microsoft has released a tool for system administrators to simplify the process of fixing the blue screen of death (BSOD) on Windows 10 and 11 computers. The solution involves the use of a bootable USB drive and a special script MsftRecoveryToolForCS.ps1.

CrowdStrike had previously released a patch to correct a logic error that led to multiple BSOD instances. However, most computers do not automatically receive this fix due to their failed state.

Restoring customers’ IT systems after a global outage of CrowdStrike software on Windows can take weeks. This is because system administrators are forced to manually restore PCs, servers, and laptops because the remote connection does not work. It requires booting the system in Safe Mode and running certain commands or using the registry.

SCONTO ESTREMO DEL 50% FINO AL 31 Dicembre sul corso Dark Web & Cyber Threat Intelligence in E-learning version

Il Dark Web e la Cyber Threat Intelligence rappresentano aree critiche per comprendere le minacce informatiche moderne. Tra ransomware, data breach e attività illecite, le organizzazioni devono affrontare sfide sempre più complesse per proteggere i propri dati e le infrastrutture. Il nostro corso “Dark Web & Cyber Threat Intelligence” ti guiderà attraverso i meccanismi e le strategie utilizzate dai criminali informatici, fornendoti competenze pratiche per monitorare, analizzare e anticipare le minacce.

Accedi alla pagina del corso condotto dall'Prof. Pietro Melillo sulla nostra Academy e segui l'anteprima gratuita.

Per un periodo limitato, potrai utilizzare il COUPON CTI-16253 che ti darà diritto ad uno sconto del 50% sul prezzo di copertina del corso
Per ulteriori informazioni, scrivici ad [email protected] oppure scrivici su Whatsapp al 379 163 8765.

Promo Corso CTI

Supporta RHC attraverso:


Ti piacciono gli articoli di Red Hot Cyber? Non aspettare oltre, iscriviti alla newsletter settimanale per non perdere nessun articolo.

Microsoft Recovery Tool avoids the need to manually boot the PC in Safe Mode and manually remove the problematic CrowdStrike update file. It greatly simplifies the recovery process using Windows PE via a USB drive. The tool accesses the affected computer drive and automatically removes the problematic CrowdStrike file, ensuring that the device boots correctly.

The advantage of this method is that it does not require booting into Safe Mode or having administrator rights on the computer. The tool accesses the drive directly, without downloading a local copy of Windows. In cases where the drive is protected by BitLocker encryption, the Microsoft tool will request the BitLocker recovery key before continuing the repair process.

It is worth noting that in some cases the MsftRecoveryToolForCS.ps1 script may not work properly.

Redazione
The editorial team of Red Hot Cyber consists of a group of individuals and anonymous sources who actively collaborate to provide early information and news on cybersecurity and computing in general.