October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan NowOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
Redmond desk3 min

Why Some Windows PCs Needed Multiple Restarts After the 2024 CrowdStrike Blue Screen Outage

The 2024 CrowdStrike Falcon update caused blue screens and restart loops on some Windows PCs. Microsoft reported recovery after multiple restarts in some cases, while also documenting Safe Mode and recovery-tool options.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The “reboot up to 15 times” advice referred to recovery attempts after a faulty CrowdStrike Falcon update disrupted some Windows computers in July 2024. Microsoft’s official guidance did not require exactly 15 restarts or promise that repeated rebooting would fix every device: it said some customers had recovered after multiple restart attempts. Other affected systems needed Safe Mode or Microsoft’s recovery tool.

What caused the worldwide blue-screen outage?

On July 18, 2024, CrowdStrike released a Falcon software update that affected some Windows systems. Microsoft identified the affected devices as Windows endpoints running the CrowdStrike Falcon agent; some displayed blue-screen errors 0x50 or 0x7E and repeatedly restarted. Microsoft said the incident was caused by CrowdStrike’s update, not by a Microsoft software update. Microsoft’s July 20, 2024 update said the company was working with CrowdStrike and others to support customers.

As an Amazon Associate I earn from qualifying purchases.

Microsoft estimated on July 20, 2024, that 8.5 million Windows devices had been affected, or less than one percent of all Windows machines. That was Microsoft’s estimate at the time, not a new or independently verified count. Microsoft noted that the disruption’s broad economic and social effects reflected CrowdStrike’s use by enterprises operating critical services.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What did “reboot 15 times” actually mean?

Microsoft’s endpoint support guidance said it had received reports of successful recovery from some customers “attempting multiple restart operations.” It did not set 15 as a required number, and it did not say every affected PC would recover through restarting alone. Contemporary reporting summarized early advice as rebooting “as many as 15” times; that phrase describes a possible number of attempts, not a guaranteed fix.

#1 Best Overall

CrowdStrike’s technical alert explained that restarting could give a host an opportunity to download a reverted channel file, and recommended a wired connection to get online faster. If a host crashed again, the alert described recovery through Safe Mode or the Windows Recovery Environment. It instructed administrators to delete only a matching C-00000291*.sys file from the CrowdStrike driver directory and warned: “Do not delete or change any other files or folders.”

What recovery options did Microsoft document?

Microsoft’s incident-specific instructions covered Windows 10 and Windows 11. They described entering the Windows recovery flow, starting in Safe Mode, finding files matching C-00000291*.sys in the CrowdStrike driver directory, and deleting the matching file. Windows may request a BitLocker recovery key. These steps address this CrowdStrike incident; they are not general instructions for every blue screen.

Rank #2
Dell Latitude 5420 14" FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)
  • 256 GB SSD of storage.
  • Multitasking is easy with 16GB of RAM
  • Equipped with a blazing fast Core i5 2.00 GHz processor.

Microsoft also released a signed recovery tool with Windows PE and Safe Mode options. Microsoft says it can recover Windows clients, servers, and Hyper-V virtual machines, and documents PXE recovery for situations where USB media is unavailable. The right route depends on the device and the recovery access available:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Can reach Safe Mode: Use the incident-specific Safe Mode procedure, taking account of any BitLocker prompt.
  • Cannot use Safe Mode but can boot recovery media: Consider Microsoft’s Windows PE recovery option.
  • No USB access: Microsoft documents PXE recovery as an alternative, where the organization has that infrastructure.
  • Server or Hyper-V virtual machine: Check the recovery tool’s instructions for the relevant system type rather than assuming the endpoint steps fit.

What should IT teams know before using the recovery tool?

For creating USB recovery media, Microsoft’s instructions require a 64-bit Windows computer with at least 8 GB of free space, administrator privileges, and a USB drive between 1 GB and 32 GB. The process erases existing data on the drive and formats it as FAT32, so use a drive whose contents can be deleted. The USB drive is only a way to prepare recovery media; it does not fix a computer by itself.

Rank #3
15.6 Inch Win 11 Laptop Computer, N4020, 4GB DDR4 RAM, 128GB Storage
  • WINDOWS 11 | STABLE PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 system, this laptop delivers stable performance for everyday computing tasks. It supports web browsing, online learning, document editing, email communication, and basic office work with optimized power efficiency, providing a practical and reliable experience for essential daily use for daily use.
  • 15.6” FHD IPS DISPLAY: Features a 15.6-inch Full HD IPS display with narrow bezels, offering wider viewing angles and clearer image details compared to standard panels. The improved screen-to-body ratio enhances visual experience for study, reading, document work, and video playback, making it suitable for both productivity and entertainment use.
  • 4GB DDR4 + 128GB eMMC STORAGE: Equipped with 4GB DDR4 memory and 128GB eMMC storage for everyday basics such as browsing, documents, email, and online learning platforms. The built-in TF card slot supports storage expansion up to 1TB, giving you more flexibility for files, photos, videos, and daily documents. TF card not included.
  • CONNECTIVITY & PORTS: Includes 1× TF card slot, 2× USB 3.2 Gen1 ports, and 2× full-featured Type-C ports (USB 3.2 Gen1). The Type-C ports support data transfer, charging, and video output, enabling flexible connection with external devices such as monitors, storage, and peripherals for daily work and study use.
  • LIGHTWEIGHT DESIGN | ONLINE COMMUNICATION: Designed with a slim, portable profile, this laptop is easy to carry for school, commuting, and travel. A built-in 1MP front camera supports online classes, video meetings, remote communication, and everyday conferencing. The 3300mAh battery works with the low-power system design to support practical daily use, while thermal optimization helps maintain quieter operation during extended tasks.

Encryption can affect which route works. Microsoft says Windows PE recovery may require a BitLocker recovery key. Its Safe Mode option may allow recovery on some BitLocker-enabled devices without entering the key, depending on the protectors configured and access to a local administrator account. Devices using TPM+PIN may still require the PIN or recovery key.

Microsoft recommends testing a recovery option on multiple devices before deploying it broadly. That matters in an enterprise environment, where device configuration, encryption, and recovery access can vary across the fleet.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Does this apply to a blue screen happening now?

No—not by itself. The restart and file-removal procedures were published for the July 2024 CrowdStrike Falcon incident. A blue screen caused by another driver, update, or hardware problem may need different troubleshooting. If a computer is currently failing, identify its error and any recent software or hardware change, and consult current guidance from the device maker or the relevant software vendor before applying incident-specific steps.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Quick Recap

Bestseller No. 1
HP 14' HD Laptop, Windows 11, Intel Celeron Dual-Core Processor Up to 2.60GHz, 4GB RAM, 64GB SSD, Webcam, Dale Pink (Renewed)
HP 14" HD Laptop, Windows 11, Intel Celeron Dual-Core Processor Up to 2.60GHz, 4GB RAM, 64GB SSD, Webcam, Dale Pink (Renewed)
14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
$245.99
Bestseller No. 2
Dell Latitude 5420 14' FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)
Dell Latitude 5420 14" FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)
256 GB SSD of storage.; Multitasking is easy with 16GB of RAM; Equipped with a blazing fast Core i5 2.00 GHz processor.
$285.00

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.