ABC:内政部长：可能得花一到两周恢复蓝屏死机的问题

aus.property

独断的网络安全老大crowdstrike在发布例行更新前显然没有经过充分的测试，导致使用同样独断的系统老大微软的850万机子宕机。
内政部长Clare O'Neil克莱尔·奥尼尔说澳大利亚可能得花一到两周恢复蓝屏死机的问题。


https://www.abc.net.au/news/2024 ... 8-million/104123326

---

深受其害！
原因找到了，紧急部门的问题可能都第一时间解决了。
但850万的个例，包括我，就没有那么幸运了。
理论上讲，解决方案都出了：可机子是锁住的，你啥也做不了！明天得回去，架在架子上在办公室等IT远程做！一到两周，澳大利亚可能不一定能全部恢复。

Boot your Windows system into safe mode or the Windows Recovery Environment (winRE)by first powering up your machine until a manufacturer's logo is visible. Press and hold the power button for ten seconds to turn off the machine. Repeat this process once more
Press the power button again to power up and the machine will boot to the winRE.
From the option menu select Troubleshoot >> Advanced Options >> Startup Settings >> Restart.
Select option 5 or press F5 to restart the machine in safe mode with Networking.
Wait for the machine to boot into the safe mode desktop.
Open the File Manager and navigate to C:\Windows\System32\drivers\CrowdStrike
Look for and delete any files that match the pattern "C-00000291*.sys"
Reboot as normal.

https://www.tomshardware.com/sof ... but-they-are-simple
微软还说，15次重启就能恢复，你试了吗？

https://www.businessinsider.com/ ... -crowdstrike-2024-7

luckyc

庆幸我们公司没用。

天天防黑客，这回好了被”内鬼”直接一锅端