Skip to main content

How To Fix Crowdstrike BSOD (July 2024)

These are the steps to fix the BSOD issue caused by csagent.sys.

We assume your computer is on the Recovery Screen

If you do not see this screen see the last section of this page.

There are 2 methods of fixing this. One uses safe mode, the other uses the recovery command prompt. Both methods will require a bitlocker key. The Safe Mode Method will also require an admin account

Obtaining a Bitlocker Key

To get your bitlocker key, email us at ithelp@phmail.ucdavis.edu and send us your machine's serial number (HP) or service tag (Dell)

(PHS IT Only, We can retrieve the bitlocker key by sending the machine name to the --CrowdStrike Failure Technical Workgroup** Teams group. Someone from their side will respond with the bitlocker key)

Command Prompt Method

This method requires an admin account

  1. Click on See advanced repair options
  2. Click on Troubleshoot > Advanced Options > Command Prompt
  3. It will now ask you to enter your Bitlocker key, Enter it and press enter
  4. You should now see a command prompt, type 
    C:
    • If it gives you an error, see the Find your main drive letter section below
  5. Run the following command and hit enter: 
    cd Windows\System32\drivers\CrowdStrike
  6. Type the following and hit tab. It should finish the command for you 
    del /f C-00000291
  7. The finished command should look something like del /f C-00000291-00000XXX-00000XXX.sys If so, it enter.
  8. You can now close the command prompt with the X in the top right corner
  9. In the next screen click the option to Continue To Windows

Your computer should now be back up and running.

Safe Mode Method

This method requires an admin account

  1. Click on See advanced repair options
  2. Click on Troubleshoot > Advanced Options System Startup > Reboot
  3. It will now ask you to enter your Bitlocker key, Enter it and press enter
  4. Select the option to boot into Safe Mode (Usually Option 4)
  5. Log in with admin account
  6. Navigate to C:\Windows\System32\drivers\CrowdStrike
  7. Delete C-00000291-00000XXX-00000XXX.sys
  8. Reboot (Start > Power Icon > Reboot
Back to top