Step-by-Step Guide - How to Fix CrowdStrike BSOD on Win 10/11?

Solve the CrowdStrike Blue Screen of Death Problem: Windows 10/11 System Repair Guide

On July 19, 2024, a large number of Windows users encountered the Blue Screen of Death (BSOD) problem when using computers, which even affected many airlines, banks and emergency service systems. According to CrowdStrike's statement, this is not a security incident or a cyber attack, but a bug in its driver update (csagent.sys BSOD). This article will provide four effective solutions.

What is CrowdStrike BSOD?

CrowdStrike BSOD is triggered by an error in the Windows driver update published by CrowdStrike. To resolve this issue, you need to delete or rename several driver files in the system.

How to fix CrowdStrike Blue Screen of Death on Windows 10/11?

Method 1: Delete the problem file in WinRE

Windows Recovery Environment (WinRE) can use some troubleshooting and diagnostic tools to fix most operating system issues that cannot be started, including the CrowdStrike blue screen error.

Step 1: Enter Windows recovery environment

1. Turn off the computer > Press the power button again to start > When you see the Windows logo on the screen, press the power button again.
2. Repeat this two or more times until the Auto Repair screen appears.
3. Click "Advanced Options" to enter the Windows recovery environment.

Step 2: Delete C-00000291*.sys file

1. In the Windows recovery environment, click "Advanced Options" and then click "Command Prompt".
2. In the command window, type the following command and press Enter to delete the C-00000291*.sys file:

del C:\\Windows\\System32\\drivers\\CrowdStrike\\C-00000291\*.sys

3. When finished, shut down the computer and restart.

Method 2: Delete the problem file in safe mode

Since csagent.sys BSOD is caused by the third-party network security software CrowdStrike, you can also enter safe mode to delete the problem file.

Step 1: Start Safe Mode

1. Turn off the computer > Press the power button again to start > When you see the Windows logo on the screen, press the power button again.
2. Repeat this two or more times until the Auto Repair screen appears.
3. Click "Advanced Options" to enter the Windows recovery environment.
4. Go to Troubleshooting > Advanced Options > Startup Settings > Restart.
5. Press F4, F5 or F6 keys as needed.

• F4 – Enable safe mode.
• F5 – Enable safe mode with network.
• F6 – Enable safe mode with command prompt.

Step 2: Delete the problem file

1. Press Win E to open File Explorer.
2. Go to the C drive > Windows > System32 > drivers > CrowdStrike folder.
3. Find files that start with C-00000291 and end with .sys, select these files, right-click and select Delete.

4. Close all open windows and restart the computer to check if CrowdStrike BSOD is resolved.

If you are still in safe mode after restarting, follow these steps to exit safe mode:

1. Press Win R to open the Run box.
2. Enter msconfig and press Enter to start "System Configuration".
3. Go to the Startup tab > Uncheck Safe Startup > Click OK.

Method 3: Rename related files or folders

Renaming the CrowdStrike folder or csagent.sys file also works.

1. Enter safe mode.
2. Press Win E to open File Explorer.
3. Navigate to: C:\Windows\System32\drivers\CrowdStrike\csagent.sys and rename the csagent.sys file. Alternatively, navigate to C:\Windows\System32\drivers\CrowdStrike and rename the CrowdStrike folder.
4. After that, restart the computer in normal mode to check if the csagent.sys BSOD still exists.

Method 4: Block CSAgent service through the registry editor

Modify the Windows registry key to block the CSAgent service.

1. Boot the computer into safe mode.
2. Press Win R to open the Run box.
3. Enter regedit.exe and press Enter to start the Registry Editor.
4. Enter the following path to find the CSAgent key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CSAgent
5. In the right pane, right-click the Startup item > select Modify > Change its Value Data to 4 > Click OK.
6. Close the Registry Editor and restart the computer.

Conclusion

The above is how to fix CrowdStrike BSOD on Windows 10/11. It is recommended to use MiniTool ShadowMaker and other software to back up important data on a daily basis just in case.

The above is the detailed content of Step-by-Step Guide - How to Fix CrowdStrike BSOD on Win 10/11?. For more information, please follow other related articles on the PHP Chinese website!