{"id":2040,"date":"2024-07-19T17:03:13","date_gmt":"2024-07-19T09:03:13","guid":{"rendered":"https:\/\/airy.cn\/WordPress\/?p=2040"},"modified":"2024-07-19T17:03:13","modified_gmt":"2024-07-19T09:03:13","slug":"windows-system-blue-screen-windows%e7%b3%bb%e7%bb%9f%e8%93%9d%e5%b1%8f","status":"publish","type":"post","link":"https:\/\/airy.cn\/WordPress\/?p=2040","title":{"rendered":"Windows system blue screen Windows\u7cfb\u7edf\u84dd\u5c4f"},"content":{"rendered":"\n<p>CrowdStrike Falcon\u7684Sensor\u66f4\u65b0\u540e\uff0c\u5185\u6838\u9a71\u52a8\u6587\u4ef6csagent.sys\u5bfc\u81f4\u5168\u7403\u5927\u9762\u79efWindows\u7cfb\u7edf\u84dd\u5c4f<\/p>\n\n\n\n<p>\u901a\u8fc7\u6062\u590d\u6a21\u5f0f\u542f\u52a8\uff0c\u6216\u591a\u6b21\u5f02\u5e38\u91cd\u542f\u8fdb\u5165\u5b89\u5168\u6a21\u5f0f\uff0c\u91cd\u547d\u540d\u4ee5\u4e0b\u6587\u4ef6\u4e3a\u5176\u4ed6\u6587\u4ef6\u540d\uff1a<br>C:\\Windows\\System32\\drivers\\CrowdStrike\\csagent.sys<br>\u6216\u76f4\u63a5\u91cd\u547d\u540dC:\\Windows\\System32\\Drivers\\Crowdstrike\u6587\u4ef6\u5939\u3002<\/p>\n\n\n\n<p>\u8fd8\u53ef\u4ee5\u901a\u8fc7WINPE\u6216\u8005ToGo\u4e5f\u53ef\u4ee5\uff0c\u7136\u540e\u4ee5\u4e0a\u64cd\u4f5c.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><strong>Windows system blue screen <\/strong><\/p>\n\n\n\n<p>After CrowDStrike Falcon&#8217;s Sensor update, the kernel driver file CSAGENT.SYS causes a large area of \u200b\u200bWindows system in the world<\/p>\n\n\n\n<p>Started through the recovery mode, or multiple abnormal restarts to enter the security mode, renamed the following files as other file names:<br>C: \\ Windows \\ System32 \\ Drivers \\ Crowstrike \\ CSAGENT.SYS<br>Or directly renamed C: \\ Windows \\ System32 \\ Drivers \\ Crowstrike folder.<\/p>\n\n\n\n<p>You can also use Winpe or Togo, and then operate the above.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CrowdStrike Falcon\u7684Sensor\u66f4\u65b0\u540e\uff0c\u5185\u6838\u9a71\u52a8\u6587\u4ef6csagent.sys\u5bfc\u81f4\u5168\u7403\u5927\u9762\u79efWi &#8230; <a title=\"Windows system blue screen Windows\u7cfb\u7edf\u84dd\u5c4f\" class=\"read-more\" href=\"https:\/\/airy.cn\/WordPress\/?p=2040\" aria-label=\"\u9605\u8bfb Windows system blue screen Windows\u7cfb\u7edf\u84dd\u5c4f\">\u9605\u8bfb\u66f4\u591a<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_kadence_starter_templates_imported_post":false,"footnotes":""},"categories":[2],"tags":[],"class_list":["post-2040","post","type-post","status-publish","format-standard","hentry","category-airy-tech"],"_links":{"self":[{"href":"https:\/\/airy.cn\/WordPress\/index.php?rest_route=\/wp\/v2\/posts\/2040","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/airy.cn\/WordPress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/airy.cn\/WordPress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/airy.cn\/WordPress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/airy.cn\/WordPress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2040"}],"version-history":[{"count":1,"href":"https:\/\/airy.cn\/WordPress\/index.php?rest_route=\/wp\/v2\/posts\/2040\/revisions"}],"predecessor-version":[{"id":2041,"href":"https:\/\/airy.cn\/WordPress\/index.php?rest_route=\/wp\/v2\/posts\/2040\/revisions\/2041"}],"wp:attachment":[{"href":"https:\/\/airy.cn\/WordPress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2040"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/airy.cn\/WordPress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2040"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/airy.cn\/WordPress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2040"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}