A blue screen, then a Windows Serious Error may occur with a stop code of 0xF4 referring to the file CSRSS.EXE .
Csrss.exe is a Microsoft client server runtime which generates worker threads for client requests. The "w32.ahlem" trojan or virus may use the same file name (csrss.exe).
The legitimate csrss.exe is a very important part of the operating system that should not be removed.
Determine whether you are infected with the "w32.ahlem" virus by trying to end the csrss.exe process:
- In Windows, press and hold the Ctrl , Alt and Del keys. The Windows Task Manager opens.
- Click the Task Manager button.NOTE:If you are using Windows XP Home edition, the Task Manager will open when directly after Step 1 is performed.
- Click the Processes tab. To sort processes by name, click Image Name .
- Click csrss.exe to select it.
- Then click the End Process button.
- Windows should inform you that csrss.exe is a critical system process and the Task Manager cannot end this process. Click OK .
If you do not receive this message your notebook may be infected with a virus. Use Symantec article: Removing the W32.Ahlem.A@mm Virus (In English) to remove the virus from your notebook.