Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

How to fix the non-bootable Windows issue caused by Crowdstrike?

Windows 10 / Windows 11:

  1. On the Windows recovery screen, please click “See advanced repair options”

  1. On the Troubleshoot window, please click “Advanced options”

  1. On the Advanced options menu, click on “Command Prompt”

  1. Now the system will prompt you to unlock the drive with the Bitlocker recovery key:

Note the unique “Recovery Key ID,” and the unique “Drive Label”

Important: Please note the first 2 letters of the Drive Label at the bottom either FS or AP

  1. Obtain the Bitlocker recovery key from one of these websites:

If you have any issues getting the recovery key, please put a ticket at http://lehigh.edu/help

  1. After entering the key, a command prompt window will show up:

  1. Type this command to list the disks on your system:

wmic logicaldisk list brief

Then take a note for the DeviceID that had the Windows VolumeName. In my case was C:

 See below:

  1. Find the “DeviceID” (letter) for the hard drive in your computer that Windows is installed on. In this case, the “Windows” volume was on the drive with DeviceID “C:” (This will be the case for most systems).

  1. Delete the offending file. Type this command exactly using your DeviceID

letter (
  1. (drive letter). Also: note the

filename with asterisk)
  1. asterisk at the end of the filename.:

del /p C:\windows\system32\drivers\CrowdStrike\C-00000291*.sys

  1. Then you will get a confirmation message that says are you sure you want to delete that file? 

Please press Y but make sure that you are deleting the right file.

8-
  1. Finally, restart your computer.