While the file properties state the file is developed by 'Microsoft Corporation', this is not the case and it is designed just to look like a legitimate Microsoft system file. The executable bfa0d68f.exe, “Client Server Runtime Process” has been detected as malware by 6 anti-virus scanners. It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘CSRSS’. While running, it connects to the Internet address ip-184-168-221-66.ip.secureserver.net on port 80 using the HTTP protocol.