How To Fix Crowdstrike BSOD (July 2024) [CMD]

These are the steps to fix the BSOD issue caused by csagent.sys.

We assume your computer is on the Recovery Screen

You will need a bitlocker recovery key to perform these steps. To get this key, please email our IT Helpdesk ithelp@phmail.ucdavis.edu and send us your machine's serial number (HP) or service tag (Dell).

For desktops, this information is usually on a sticker somewhere on the computer.
If you have an HP laptop, it is located on the bottom of the laptop next to the vent. It should be next to the SN# line and begins with the number 5

Please wait to hear back from us and use the Bitlocker recovery key you receive to complete the steps below.

Steps

Click on See advanced repair options > Troubleshoot > Advanced Options > Command Prompt
It will now ask you to enter your Bitlocker recover key, Type it in the box and press enter
You should now see a command prompt. Carefully type the following commands and hit enter after each line:
```
C:
cd Windows\System32\drivers\CrowdStrike
del /f C-00000291*.sys
```
Assume no errors show up, you can now close the command prompt with the X in the top right corner
In the next screen click the option to Continue To Windows

Your computer should now be back up and running.

If you prefer us to walk you through these steps over the phone, please let us know and we would be happy to do so.

As always, you can get in touch with us at ithelp@phmail.ucdavis.edu