logo

CrowdStrike blue screen issue

ID: b5e24fbd-759d-5050-91b3-79a3e869a9be

STIX ID: report--b5e24fbd-759d-5050-91b3-79a3e869a9be

Feed Name: ThreatLocker Blog

Date Published: 2025-05-21

Date Updated: 2026-05-01

...
...

ThreatLocker reports a widespread issue where a faulty CrowdStrike driver file caused Windows BSODs starting July 19 and outlines immediate remediation: boot to Recovery/Safe Mode and delete the problematic C:\Windows\System32\drivers\CrowdStrike\C-00000291*.sys. The company provides a community policy to block reads/writes to the file, suggests a cautious temporary deny policy for CrowdStrike if needed, and offers support (including MDR on request) to assist with file removal; updates will follow as more information becomes available.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.