Windows 10: My Windows 10 Anti Virus changed without me asking to Crowdstrike Falcon Sensor, but there...

Hello anyone!I think I had become quarantined on my PC so I went went to do the usual "restore" file which I've done countless times by going into the Windows Defender protection history and restoring said file.Anyway, yesterday I went to do the same process but found that the usual defender has been swapped out with Crowdstrike Falcon Sensor??First question,.. I never asked for this and I was never informed that this was going to be installed on my computer. When on earth was this change made? If I look at my apps & features it was installed on the 29th August 2023. If I go to uninstall i

:)

 

CrowdStrike Falcon Sensor Installation Failure

Hello,

We are working through deploying CrowdStrike as our new IDS/IPS and had a few machines decide not to cooperate. I have been in contact with CrowdStrike support to the extent they told me I need a Windows specialist.

So far I have run CrowdStrike's Windows diagnostic tool, A "Get-InstallerRegistration.ps1" from CrowdStrike support, collected a Windows Installation Log during install attempt, and also run Windows ProcMon during Installation.

When running the installation a dialogue box appears that says, "Service 'Crowdstrike Falcon Sensor Service' (CSFalconService) could not be installed. Verify you have sufficient privileges to install system services.'

I do have admin rights, have right-clicked and Run as Admin.

Any help is appreciated.

 

Falcon was unable to communicate with the CrowdStrike cloud. Please check your network configuration and try again.

Falcon was unable to communicate with the CrowdStrike cloud. Please check your network configuration and try again.

 

Can't update to 1909 [HRESULT 0x800704B8]

The other site might be better because I have seen this error before with other Enterprise folks and they were not, as far as I know, able to resolve it. So I will just point out a few things. Good Luck with it.

The Bios seems to be from 2018, have you checked for an update?

I see this message in your log. Perhaps it is involved but is there a way to repair or update the Security Data Base?

Using Sdb Id: [{11111111-1111-1111-1111-111111111111}] Size: [13432712] Modified: [2016-01-01T00:00:00], at path C:\$WINDOWS.~BT\Sources\appraiser.sdb

And lastly, the anti-Virus situation could be relevant. The situation with Windows Defender being out of date, may be because the other Anti-Virus had disabled it. But recent Windows build versions and the Anti-Virus seem to work in together so the Windows Defender definitions are up to date.

SP Antivirus software information:

Name: CrowdStrike Falcon Sensor, Path: C:\Program Files\CrowdStrike\CSFalconService.exe, Timestamp: Fri, 06 May 2022 15:38:34 GMT, State: 266240

Name: Check Point Anti-Malware, Path: C:\Program Files (x86)\CheckPoint\Endpoint Security\Anti-Malware\epam_svc.exe, Timestamp: Fri, 06 May 2022 15:31:15 GMT, State: 266256

Name: Windows Defender, Path: %ProgramFiles%\Windows Defender\MsMpeng.exe, Timestamp: Tue, 07 Jan 2020 16:42:22 GMT, State: 393472

Name: CrowdStrike Falcon Sensor, Path: C:\Program Files\CrowdStrike\CSFalconService.exe, Timestamp: Thu, 20 May 2021 12:17:12 GMT, State: 266240

Name: CrowdStrike Falcon Sensor, Path: C:\Program Files\CrowdStrike\CSFalconService.exe, Timestamp: Thu, 10 Mar 2022 13:36:53 GMT, State: 266240