CrowdStrike Remediation steps for Work from Home users

1.  If your machine is currently not in recovery mode (like in the screenshot above) you may have to reboot and continuously press F8 on your keyboard to put the device into recovery mode. The boot screen may say ‘Please Wait’ or ‘Automatic Recovery.’ When it reaches the recovery screen as seen above choose ‘See advanced repair options’.
2.  Choose ‘Advanced options’
3.  Select ‘Command Prompt’
4.  You will then be prompted to enter your BitLocker recovery key. This can be attained by contacting the Help Desk at 1-800-315-3020. They will need the first 8 digits of the Recovery Key ID. Enter the key you receive from the Help Desk in the white entry prompt and then click ‘Continue’. The key entered must be exact so please be very careful as you enter the key or you will be unable to proceed.
5.  A command prompt window will open, and the following command will need to be entered exactly as displayed here:
del C:\Windows\System32\drivers\Crowdstrike\C-00000291*.sys
Hit the ‘Enter’ key.

6.  Close the command prompt by clicking the red ‘X’ and then select the option to ‘Continue’, this will reboot the workstation and then it should boot back into Windows normally.

If the workstation does not boot back into Windows normally, please contact the Help Desk @ 1-800-315-3020 for further guidance.