Skip to content
English
Sign in
Contact us
  • There are no suggestions because the search field is empty.

(Internal) Use Case: Bug during a forced interruption while removing CrowdStrike on a Windows workstation

Context

This case highlights problems encountered after a forced interruption during the removal of CrowdStrike on a Windows workstation, leading to peripheral malfunctions such as USB ports and Bluetooth connectivity issues.

Symptoms : 

  • A TrendMicro antivirus blocked the CrowdStrike installation.

  • CrowdStrike removal was forcibly stopped via Task Manager.

  • Unable to reach CrowdStrike cloud servers during installation, although the PC was connected to the SFR box.

  • USB ports on the workstation stopped working.

  • Bluetooth stopped working.

Diagnosis 

  • The forced interruption of the removal caused conflicts with certain drivers.

  • CrowdStrike’s Device Control module can interfere with the workstation’s USB ports.

  • Bluetooth drivers were no longer visible in Device Manager, indicating driver issues.

  • The network configuration (ipconfig /all) showed that the default DNS server used was the SFR box.

Recommendations 

  • Always uninstall or disable existing antivirus software before installing CrowdStrike to avoid potential conflicts.

  • Never forcibly stop CrowdStrike installation or removal processes.

  • Temporarily change the workstation’s DNS server in the network settings.

  • Temporarily disable the Windows firewall.

  • Reinstall Bluetooth drivers from the workstation manufacturer’s official website.