https://github.com/miguelgargallo/crowdstrike-rollback

CrowdStrike-rollback.ps1 is a PowerShell script designed to automate the removal of a specific file related to CrowdStrike that may be causing issues on your Windows system. This script should be executed in Safe Mode or the Windows Recovery Environment.
https://github.com/miguelgargallo/crowdstrike-rollback

automate bat crowdstrike de en fr ita ps1 rollback script server systems

Last synced: 29 days ago
JSON representation

CrowdStrike-rollback.ps1 is a PowerShell script designed to automate the removal of a specific file related to CrowdStrike that may be causing issues on your Windows system. This script should be executed in Safe Mode or the Windows Recovery Environment.

• Host: GitHub
• URL: https://github.com/miguelgargallo/crowdstrike-rollback
• Owner: miguelgargallo
• License: other
• Created: 2024-07-19T16:08:04.000Z (6 months ago)
• Default Branch: main
• Last Pushed: 2024-07-19T17:15:35.000Z (6 months ago)
• Last Synced: 2024-12-30T01:16:16.564Z (about 1 month ago)
• Topics: automate, bat, crowdstrike, de, en, fr, ita, ps1, rollback, script, server, systems
• Language: PowerShell
• Homepage: https://pylar.org
• Size: 412 KB
• Stars: 2
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: License.md

Awesome Lists containing this project

README

        
# CrowdStrike-rollback



  





  

    

  

  

    

  



## Description

CrowdStrike-rollback.ps1 is a PowerShell script designed to automate the removal of a specific file related to CrowdStrike that may be causing issues on your Windows system. This script should be executed in Safe Mode or the Windows Recovery Environment.

## Issue with CrowdStrike

CrowdStrike is a security solution that protects endpoints against threats. However, certain CrowdStrike files may become corrupted or cause issues that prevent the system from functioning correctly. Specifically, a file named `C-00000291*.sys` in the `C:\Windows\System32\drivers\CrowdStrike` directory needs to be removed to resolve the problem.

## Usage Instructions

### Step 1: Preparation

- Ensure you have administrator permissions on the system where the script will be run.

- Save the script as `CrowdStrike-rollback.ps1`.

### Step 2: Boot into Safe Mode

1. Restart the system and enter Safe Mode or the Windows Recovery Environment.

2. To enter Safe Mode, hold down the **Shift** key while clicking "Restart" and then select:

   - "Troubleshoot"

   - "Advanced options"

   - "Startup Settings"

   - "Restart"

   - Select the option for Safe Mode.

3. To enter the Windows Recovery Environment, follow a similar process and select:

   - "Troubleshoot"

   - "Advanced options"

   - "Command Prompt".

### Step 3: Run the Script

1. Open PowerShell with administrator privileges.

2. Navigate to the directory where the script was saved.

3. Execute the script with the following command:

   ```powershell

   .\CrowdStrike-rollback.ps1

   ```

This should help automate the process of resolving the issue.