# How many people have a bunch of PCs that are down right now? **URL:** \ **Category:** General Discussion\ **Created:** [July 19, 2024, 10:32am UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449 "2024-07-19T10:32:12Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![justinedwards.jle](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/justinedwards.jle/32/37854_2.png) [@justinedwards.jle](https://forum.inductiveautomation.com/u/justinedwards.jle)\ **Post date:** [July 19, 2024, 10:32am UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/1 "2024-07-19T10:32:12Z")
> **[Huge Microsoft Outage Linked to CrowdStrike Takes Down Computers Around the...](https://www.wired.com/story/microsoft-windows-outage-crowdstrike-global-it-probems/)** > > A software update from cybersecurity company CrowdStrike appears to have inadvertently disrupted IT systems globally. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [July 19, 2024, 11:28am UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/2 "2024-07-19T11:28:59Z")
Not me. πŸ€·β€β™‚οΈ ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [July 19, 2024, 11:30am UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/3 "2024-07-19T11:30:19Z")
We use CS… checked my windows laptop and it’s fine, but who knows. Glad I’m out today 😁 ---
**Author:** ![justinedwards.jle](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/justinedwards.jle/32/37854_2.png) [@justinedwards.jle](https://forum.inductiveautomation.com/u/justinedwards.jle)\ **Post date:** [July 19, 2024, 11:49am UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/4 "2024-07-19T11:49:17Z")
Same here. I hear a lot of the debit card machines are down. ---
**Author:** ![dkhayes117](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/dkhayes117/32/68344_2.png) [@dkhayes117](https://forum.inductiveautomation.com/u/dkhayes117)\ **Post date:** [July 19, 2024, 12:11pm UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/5 "2024-07-19T12:11:20Z")
One of our IT guys installed CrowdStrike on our Ignition **production** gateway a few weeks ago for testing, and now we have the BSoD. ---
**Author:** ![dkhayes117](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/dkhayes117/32/68344_2.png) [@dkhayes117](https://forum.inductiveautomation.com/u/dkhayes117)\ **Post date:** [July 19, 2024, 12:12pm UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/6 "2024-07-19T12:12:51Z")
It's scary how easy it was to take down so many systems from such a simple attack, I mean mistake. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [July 19, 2024, 12:15pm UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/7 "2024-07-19T12:15:50Z")
> [@dkhayes117](#): > > take down so many systems Perhaps your IT guys need to read some of this: [https://forum.inductiveautomation.com/search?q=%40pturmel%20malpractice%20order%3Alatest](https://forum.inductiveautomation.com/search?q=%40pturmel%20malpractice%20order%3Alatest) and reconsider their OS choice(s). At least on production systems. ---
**Author:** ![justinedwards.jle](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/justinedwards.jle/32/37854_2.png) [@justinedwards.jle](https://forum.inductiveautomation.com/u/justinedwards.jle)\ **Post date:** [July 19, 2024, 12:16pm UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/8 "2024-07-19T12:16:25Z")
Reportedly, after the second failed restart, you'll get the option for advanced troubleshooting options. If somehow, you can get the boot to safe mode option to work, then you can delete file C-00000291.sys, and that will fix the computer. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [July 19, 2024, 1:22pm UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/9 "2024-07-19T13:22:36Z")
Perhaps this should be under General Discussion? ---
**Author:** ![justinedwards.jle](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/justinedwards.jle/32/37854_2.png) [@justinedwards.jle](https://forum.inductiveautomation.com/u/justinedwards.jle)\ **Post date:** [July 19, 2024, 1:48pm UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/10 "2024-07-19T13:48:31Z")
Agreed. I moved it. ---
**Author:** ![bkarabinchak.psi](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bkarabinchak.psi/32/83567_2.png) [@bkarabinchak.psi](https://forum.inductiveautomation.com/u/bkarabinchak.psi)\ **Post date:** [July 19, 2024, 1:52pm UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/11 "2024-07-19T13:52:13Z")
I was converting a VHD to VMDK overnight and I walked into to my coworkers asking if I heard about the crowdstrike news and then a blue screen lol. Luckily got in after getting my bitlocker key and deleting the problematic file. Most of our computers were off overnight so no problem but not me (: My heart goes out to any and all IT working OT this weekend. Who's idea was it to push on a Fridays anyways? Lot of interesting stories - [Reddit - Dive into anything](https://www.reddit.com/r/crowdstrike/comments/1e6vmkf/bsod_error_in_latest_crowdstrike_update/) ---
**Author:** ![justinedwards.jle](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/justinedwards.jle/32/37854_2.png) [@justinedwards.jle](https://forum.inductiveautomation.com/u/justinedwards.jle)\ **Post date:** [July 19, 2024, 2:04pm UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/12 "2024-07-19T14:04:59Z")
> [@bkarabinchak.psi](#): > > push on a Fridays Standard Operating Procedure ---
**Author:** ![bkarabinchak.psi](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bkarabinchak.psi/32/83567_2.png) [@bkarabinchak.psi](https://forum.inductiveautomation.com/u/bkarabinchak.psi)\ **Post date:** [July 19, 2024, 2:08pm UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/13 "2024-07-19T14:08:04Z")
One comment from the thread I linked - > The entire sum of everything that Crowdstrike might ever have prevented is probably less than the damage they just caused. I think they can remove the word probably though. I was at the doctors office this morning and they were down. Airports grounding flights, hospital servers are down. If no one knew this was crowdstrike they would think this was the single most effective cyber security attack ever. ---
**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\ **Post date:** [July 19, 2024, 2:35pm UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/14 "2024-07-19T14:35:46Z")
Pour one out for the employee who pushed this update and is sweating absolute buckets right now 🀣 ---
**Author:** ![michael.flagler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/michael.flagler/32/26272_2.png) [@michael.flagler](https://forum.inductiveautomation.com/u/michael.flagler)\ **Post date:** [July 19, 2024, 3:45pm UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/15 "2024-07-19T15:45:57Z")
Just curious @pturmel if you use any AV/security software on Linux or if you've ever felt the need to? ---
**Author:** ![dkhayes117](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/dkhayes117/32/68344_2.png) [@dkhayes117](https://forum.inductiveautomation.com/u/dkhayes117)\ **Post date:** [July 19, 2024, 3:48pm UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/16 "2024-07-19T15:48:13Z")
We restored our gateway, but now my Kepware license is broken for some reason, ugh. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [July 19, 2024, 4:03pm UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/17 "2024-07-19T16:03:07Z")
Haven't felt the need. Played with tripwire some, but there simply isn't strong evidence that Linux AV tools protect **Linux** beyond what a iptables and SSH certificates security provide. There are some that are valuable for protecting **Windows** systems that use Linux as a fileserver or similar resource, and to add layers to susceptible web server technologies (looking at **you** , PHP). Out of date webservers are responsible for ~99.9% of all Linux compromises in the real world, for which Linux AV appears to be useless. Probably the most valuable tool for publicly exposed servers is `fail2ban`, which leverages application logging and iptables to chop off IP addresses that probe your system. I should add that SELinux is good for exposed systems, but it seems to only be a speed bump for any hacker that gets root access. ---
**Author:** ![Arnaud\_Declerck](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/arnaud_declerck/32/44872_2.png) [@Arnaud\_Declerck](https://forum.inductiveautomation.com/u/Arnaud_Declerck)\ **Post date:** [July 19, 2024, 5:26pm UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/18 "2024-07-19T17:26:41Z")
I've one rule. Don't use the last version always use penultimate one πŸ˜‰ That rule saved me already a lot of time with some Rockwell software πŸ˜„ ---
**Author:** ![bkarabinchak.psi](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bkarabinchak.psi/32/83567_2.png) [@bkarabinchak.psi](https://forum.inductiveautomation.com/u/bkarabinchak.psi)\ **Post date:** [July 19, 2024, 5:39pm UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/19 "2024-07-19T17:39:15Z")
The crowdstrike update was automatic. You didn't choose to update or not it just downloaded and ran the update. Maybe there's a way to disable that, or if its offline it wouldn't, but the default installation does this, and I would bet they sell it as a better way to do things so you don't have to worry about staying up to date on security threats. It just works better! Until... ---
**Author:** ![Steve\_Laubach](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/steve_laubach/32/60900_2.png) [@Steve\_Laubach](https://forum.inductiveautomation.com/u/Steve_Laubach)\ **Post date:** [July 19, 2024, 5:48pm UTC](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449/20 "2024-07-19T17:48:02Z")
I just got back from a plant. We didn't put CS on their infrastructure but someone else did. Main SCADA was down. Fixed now. [Next page](https://forum.inductiveautomation.com/t/how-many-people-have-a-bunch-of-pcs-that-are-down-right-now/93449.md?page=2)