Red Hot Cyber
Cybersecurity is about sharing.
Recognize the risk, combat it, share your experiences,
and encourage others to do better than you.
Redazione RHC : 23 July 2024 12:13
Microsoft has released a tool for system administrators to simplify the process of fixing the blue screen of death (BSOD) on Windows 10 and 11 computers. The solution involves the use of a bootable USB drive and a special script MsftRecoveryToolForCS.ps1.
CrowdStrike had previously released a patch to correct a logic error that led to multiple BSOD instances. However, most computers do not automatically receive this fix due to their failed state.
Restoring customers’ IT systems after a global outage of CrowdStrike software on Windows can take weeks. This is because system administrators are forced to manually restore PCs, servers, and laptops because the remote connection does not work. It requires booting the system in Safe Mode and running certain commands or using the registry.
Vorresti toccare con mano la Cybersecurity e la tecnologia? Iscriviti GRATIS ai WorkShop Hands-On della RHC Conference 2025 (Giovedì 8 maggio 2025)
Se sei un ragazzo delle scuole medie, superiori o frequenti l'università, oppure banalmente un curioso di qualsiasi età, il giorno giovedì 8 maggio 2025 presso il teatro Italia di Roma (a due passi dalla stazione termini e dalla metro B di Piazza Bologna), si terranno i workshop "hands-on", creati per far avvicinare i ragazzi alla sicurezza informatica e alla tecnologia. Questo anno i workshop saranno:
Supporta RHC attraverso:
Ti piacciono gli articoli di Red Hot Cyber? Non aspettare oltre, iscriviti alla newsletter settimanale per non perdere nessun articolo.
Microsoft Recovery Tool avoids the need to manually boot the PC in Safe Mode and manually remove the problematic CrowdStrike update file. It greatly simplifies the recovery process using Windows PE via a USB drive. The tool accesses the affected computer drive and automatically removes the problematic CrowdStrike file, ensuring that the device boots correctly.
The advantage of this method is that it does not require booting into Safe Mode or having administrator rights on the computer. The tool accesses the drive directly, without downloading a local copy of Windows. In cases where the drive is protected by BitLocker encryption, the Microsoft tool will request the BitLocker recovery key before continuing the repair process.
It is worth noting that in some cases the MsftRecoveryToolForCS.ps1 script may not work properly.
Redazione