Crowdstrike : The Unplanned Global “Day Off”. - (Fix in OP) (1 Viewer)

[[icon]]

Crowdstrike Antivirus has brought down the globe. Whatcha doing with your day off?

American, Delta, and United calling for a global ground stop on all flights.

Global ground stop issued by FAA

Australia completely shut down.

Business systems globally are toast. My system is Ok. The wife’s is toast.

IF YOU GET HIT : Here is the fix:

1. Boot Windows into Safe Mode or WRE.
2. Go to C:
   Windows\System32\drivers\CrowdStrike
3. Locate and delete file matching
   "C-00000291* sys"
4. Boot normally.

Source

 

[Leeroy Jenkins]

Crazy

 

[belljr]

Well since it brought down my internet I guess NCAA college football's off the f****** table

 

[Max Power]

Two of our off-site locations are hard down right now. Main location seems fine though.

 

[Pip's Invitation]

No issues at work, but my bank's online banking system is down.

 

[BobbyLayne]

too soon

 

[bcat01]

Working here. No day off.

 

[BobbyLayne]

most airports in India are grounded

the ones that are still flying are issuing handwritten boarding passes

 

[BobbyLayne]

IF YOU GET HIT : Here is the fix:

1. Boot Windows into Safe Mode or WRE.
2. Go to C:
   Windows\System32\drivers\CrowdStrike
3. Locate and delete file matching
   "C-00000291* sys"
4. Boot normally.

Mac and Linux users unaffected?

 

[belljr]

Jokes on them I was already off.....grr

 

[[icon]]

IF YOU GET HIT : Here is the fix:

1. Boot Windows into Safe Mode or WRE.
2. Go to C:
   Windows\System32\drivers\CrowdStrike
3. Locate and delete file matching
   "C-00000291* sys"
4. Boot normally.

Mac and Linux users unaffected?

Windows Azure based outage.

As usual Mac based systems good to go.

 

[3C's]

Got a new file this morning at 0302: C-00000291-00000000-00000030.sys

Awaiting my unplanned day off but so far nothing...

 

[BobbyLayne]

12 hour time lapse of American, Delta and United plane traffiic

 

[eoMMan]

Come on, people. We still expect everyone to go through their emails, their files, etc. Stay productive!

 

[3C's]

Got a new file this morning at 0302: C-00000291-00000000-00000030.sys

Awaiting my unplanned day off but so far nothing...

Lots of BSOD messages on our IT support channel. Think I'll just go ahead and delete the file before it catches me...

 

[Max Power]

Come on, people. We still expect everyone to go through their emails, their files, etc. Stay productive!

Teams have pulled out white boards and dry erase markers for brainstorming sessions. I can now assume they will start day drinking shortly

 

[Desert_Power]

Supposed to fly to Austin today

 

[SwampDawg]

Fix is already out, a reboot as long as it can reach CrowdStrike grabs the updated file and resolves it. Took us about and hour and a half to get servers and some oddball one off desktop PC's back up, fortunately all our employees use laptops and get forced off the VPN at night so no ones laptop got the corrupted file as far as we can tell and they were all fine this morning.

 

[3C's]

Man, the guy who put this out might wanna do this, but they're probably down too.

https://travelprnews.com/wp-content/uploads/2021/09/Wanna-Get-Away%C2%AE-campaign-by-Southwest-Airlines-begins-with-fares-as-low-as-59-one-way-for-a-fall-getaway.jpg

VirginiaDMV
·
Due to the global IT outage, DMV Customer Service Centers are closed. Online transactions are also unavailable. Stay tuned to our social media for updates. We appreciate your patience.

 

[Phil Elliott]

Crowdstrike CEO, George Kurz, now on CNBC. "It only affected Microsoft Windows devices."

 

[Ron Swanson]

Once again, happy to be a ChromeOS shop. Although we have a separate Azure outage this morning.

 

[3C's]

Buy on the dip!

Market Summary > Crowdstrike Holdings Inc
297.64 USD −45.41 (13.24%)
today

 

[Skipdog77]

Every Friday off, so no impact here.

 

[Hawks64]

Crowdstrike Antivirus has brought down the globe. Whatcha doing with your day off?

American, Delta, and United calling for a global ground stop on all flights.

Global ground stop issued by FAA

Australia completely shut down.

Business systems globally are toast. My system is Ok. The wife’s is toast.

IF YOU GET HIT : Here is the fix:

1. Boot Windows into Safe Mode or WRE.
2. Go to C:
   Windows\System32\drivers\CrowdStrike
3. Locate and delete file matching
   "C-00000291* sys"
4. Boot normally.

Source

Only if you have local admin rights. In most orgs this isn't possible for end users.

 

[Don Quixote]

Southwest unimpacted — rewarded for not updating their technology since 1997.

 

[Hawks64]

IF YOU GET HIT : Here is the fix:

1. Boot Windows into Safe Mode or WRE.
2. Go to C:
   Windows\System32\drivers\CrowdStrike
3. Locate and delete file matching
   "C-00000291* sys"
4. Boot normally.

Mac and Linux users unaffected?

Windows Azure based outage.

As usual Mac based systems good to go.

Azure outage isn't related to the Crowdstrike issue.

 

[Ministry of Pain]

Looked like a lot of flight delays/cancellations today

More concerned about hospitals

 

[Scoresman]

I couldn't order my Starbucks order ahead through the app. What is the world coming to?

 

[TripItUp]

I own a cybersecurity consulting firm...ask me anything.

 

[belljr]

I own a cybersecurity consulting firm...ask me anything.

Why'd you let this happen?

 

[AAABatteries]

I own a cybersecurity consulting firm...ask me anything.

Is CrowdStrike the Gregg Berhalter of cybersecurity?

 

[urbanhack]

I own a cybersecurity consulting firm...ask me anything.

If you were starting a new business today (outside of cyber) which SIEM vendor would you choose?

 

[FreeBaGeL]

I own a cybersecurity consulting firm...ask me anything.

Is CrowdStrike the Gregg Berhalter of cybersecurity?

They're going to evaluate this and see if action needs to be taken over the next few months.

 

[GroveDiesel]

All of our internal stuff is back up and running fine. Unfortunately our vendor software that handles all of our client management, project management, invoicing, and timesheets is still down. So that’s fun.

 

[lsutigers]

Southwest unimpacted — rewarded for not updating their technology since 1997.

I guess I'm out of the loop on that one and thought you were joking.

Nope, they are running 32 years old Windows 3.1/Windows 95. Wow.

 

[Gr00vus]

Crowdstrike Antivirus has brought down the globe. Whatcha doing with your day off?

American, Delta, and United calling for a global ground stop on all flights.

Global ground stop issued by FAA

Australia completely shut down.

Business systems globally are toast. My system is Ok. The wife’s is toast.

IF YOU GET HIT : Here is the fix:

1. Boot Windows into Safe Mode or WRE.
2. Go to C:
   Windows\System32\drivers\CrowdStrike
3. Locate and delete file matching
   "C-00000291* sys"
4. Boot normally.

Source

You forgot

5. Uninstall CrowdStrike
6. Move to Linux

 

[Gr00vus]

GB FBGs for staying up.

 

[Kanil]

I own a cybersecurity consulting firm...ask me anything.

I have a buddy who I normally play video games with during the day. He lives in Houston. His name is Chris, I'm sure you know him. Can you go tell him to logon because I've been bored the last two days without him.

 

[FreeBaGeL]

Southwest unimpacted — rewarded for not updating their technology since 1997.

I guess I'm out of the loop on that one and thought you were joking.

Nope, they are running 32 years old Windows 3.1/Windows 95. Wow.

The joke is that Southwest famously had a major issue that wreaked havoc/delays over the holidays last year due to their insanely out of date software. So it's both a joke and true that they are probably doing fine today compared to the other carriers.

 

[Joe Bryant]

What's the status on this now? What percentage back to normal are things?

 

[Don Quixote]

Southwest unimpacted — rewarded for not updating their technology since 1997.

I guess I'm out of the loop on that one and thought you were joking.

Nope, they are running 32 years old Windows 3.1/Windows 95. Wow.

The joke is that Southwest famously had a major issue that wreaked havoc/delays over the holidays last year due to their insanely out of date software. So it's both a joke and true that they are probably doing fine today compared to the other carriers.

I was giving Southwest too much credit with my joke. I said 1997, but actually 1992.

A Windows version from 1992 is saving Southwest’s butt right now

Nearly every flight in the U.S. is grounded right now following error that’s affecting everything from travel to mobile ordering at Starbucks — but not Southwest Airlines flights. Southwest is still flying high, unaffected by the outage that’s plaguing the world today, and that’s apparently...

www.yahoo.com

 

[Phil Elliott]

At Home Depot this afternoon around 1:00 and 2 of the 4 self checkout terminals had the blue screen of death. One of them rebooted while I was waiting to checkout.

 

[brun]

Was able to order a 4 pack of Lucky Dog hot sauce this morning. So, all good.

 

[Jayrod]

The Wendy's drive through had a girl taking orders on a tablet Chick-fil-A style.

The local gas station had all ofbtheir fountain drinks out of order, but I doubt that had anything to do with the virus.

 

[BeTheMatch]

Keep the stories coming, fellas!!!

 

[3C's]

Now I find out!

Krispy Kreme giving away free doughnuts Friday due to global tech outage: What to know

Krispy Kreme is responding to Friday's global tech outage by offering customers free doughnuts from 5-7 p.m. Friday.

www.usatoday.com

 

[Ridgeback]

Was able to order a 4 pack of Lucky Dog hot sauce this morning. So, all good.

Thanks for the reminder! That **** is the best. A deluxe version too?

 

[Sand]

Crowdstrike is now an official sponsor of the Secret Service.

 

[Hoh]

ironically the McDonalds ice cream machines were working….

 

[brun]

Was able to order a 4 pack of Lucky Dog hot sauce this morning. So, all good.

Thanks for the reminder! That **** is the best. A deluxe version too?

2 deluxe, 2 white Label