How to Fix Windows 11 CrowdStrike Error

Step 1: Reboot the Host

Reboot the host to give it an opportunity to download the reverted channel file. We strongly recommend putting the host on a wired network (as opposed to WiFi) prior to rebooting as the host will acquire internet connectivity considerably faster via ethernet.

Step 2: Boot into Safe Mode or Windows Recovery Environment

• If the host crashes again, boot Windows into Safe Mode or the Windows Recovery Environment (WinRE).
• Note: Putting the host on a wired network (as opposed to WiFi) and using Safe Mode with Networking can help remediation.

To boot into Safe Mode:
Restart your computer.
Press F8 (or Shift + F8) before Windows starts loading.
Select Safe Mode or Safe Mode with Networking.

Step 3: Open Command Line in Safe Mode

Once in Safe Mode, press Win + R to open the Run dialog.
Type cmd and press Enter.

Step 3: Navigate to CrowdStrike Directory

Navigate to the %WINDIR%\System32\drivers\CrowdStrike directory.

Note: On WinRE/WinPE, navigate to the Windows\System32\drivers\CrowdStrike directory of the OS volume.

cd %WINDIR%\System32\drivers\CrowdStrike

cd x:\Windows\System32\drivers\CrowdStrike

Step 5: Delete the Specific File

Locate the file matching “C-00000291*.sys”, and delete it.

del C-00000291*.sys

Step 6: Boot the Host Normally

Boot the host normally.

Note: BitLocker-encrypted hosts may require a recovery key.

Need Help?

If none of the above steps resolve the issue, contact CrowdStrike support or your IT department for further assistance.