If it is not possible to boot into Safe Mode, or the Windows Recovery Environment to delete the .sys file required to address the Crowdstrike bug, you can try making a Live USB with Linux installed, and accessing the Windows File System that way. To do so Follow these Steps:
With a USB Flash Drive that's at least 4GB
- Download Ubuntu from the Link here https://ubuntu.com/download Note that other flavors of Linux have a difficult time reading Raid Drives created with Intel RST, which is used by the M7 and M8 Platforms.
- Download Etcher or a similar flash software https://etcher.balena.io/
- Flash the Linux ISO you downloaded onto the USB with Etcher
- Plug the Flash drive into the XPression PC
- Reboot the machine and navigate to the BIOS.
- Change the Boot Order (under the boot menu) to have the Linux USB be the first option
- Exit BIOS
- Select the first option in the list that's presented.
From here, the PC will go into a Live Session of Ubuntu from the USB. You will see an option to install Ubuntu on the Desktop, DO NOT click it.
9. Once in the desktop environment, you can Navigate to the File Explorer, find the Windows OS Drive under the Devices Tab and Delete the c-00000291*.sys file in C:\Windows\System32\drivers\CrowdStrike
Note that there will be no drive labelled "C" as Linux doesn't mark drives in this way. Once the drive with the Windows install (Containing Program Files, Program Data, Windows, etc, and usually 256GB) then that will be the one to navigate through to the above path.
10.Restart the PC, going back into BIOS
11. Select the Windows OS Drive as the First item to Boot
You should be back in a stable Windows Environment. You can then remove the Linux USB and use the machine as normal.
If you have any questions please contact Technical Support