What is xfr.exe?

The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the xfr.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.

Click to Run a Free Scan for xfr.exe related errors

Xfr.exe file information

Windows Task Manager with xfr
Xfr.exe process in Windows Task Manager

The process known as CBA - Message Resource belongs to software Intel Common Base Agent or Ape by Intel ( or LANDesk Software (

Description: Xfr.exe is not essential for Windows and will often cause problems. Xfr.exe is located in a subfolder of C:\Windows\System32—normally C:\WINDOWS\system32\cba\. Known file sizes on Windows 10/8/7/XP are 36,915 bytes (84% of all occurrences), 42,824 bytes, 11,264 bytes, 30,232 bytes or 42,776 bytes. 
The program is not visible. The file is not a Windows core file. The process uses ports to connect to or from a LAN or the Internet. The xfr.exe file is an unknown file in the Windows folder. Xfr.exe is able to hide itself. Therefore the technical security rating is 64% dangerous; however you should also read the user reviews.

Recommended: Identify xfr.exe related errors

If xfr.exe is located in the Windows folder for temporary files, the security rating is 60% dangerous. The file size is 190,464 bytes. The file is a file with no information about its developer. The program is not visible. The application starts upon Windows startup (see Registry key: Run). The file is not a Windows system file.

If xfr.exe is located in a subfolder of the user's profile folder, the security rating is 36% dangerous. The file size is 160,768 bytes. The program has a visible window. The xfr.exe file is a file with no information about its developer. The process starts upon Windows startup (see Registry key: Run). Xfr.exe is not a Windows system file.

External information from Paul Collins:

Important: Some malware camouflages itself as xfr.exe, particularly when located in the C:\Windows or C:\Windows\System32 folder. Therefore, you should check the xfr.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.


User Comments

Part of the LANDESK Management Suite
  pegasus   (further information)
LanDesk File
it always tries to gain access to ports 1027 and 12174 I don't know what the heck this is.
Lan application on laptop computer
If you run Symantec Antivirus Corporate Server you will probably get this process in your process list
  TI - Ruben  
This is part of Symantec Antivirus - Central Quarantine
communicates infections to Symantec a Landesk product. Comes when you install the Symantec Corp Edition 8.0 + Client on a workstation
  Dean Davidson   (further information)
part of Both LanDesk and Symantec
  Graham Mason  
It's a folder used by Symantec
  Techy   (further information)

Rating chart

Summary: Average user rating of xfr.exe: based on 13 votes with 9 user comments. 6 users think xfr.exe is essential for Windows or an installed application. One user thinks it's probably harmless. 3 users think it's neither essential nor dangerous. 2 users suspect danger. One user thinks xfr.exe is dangerous and recommends removing it. 3 users don't grade xfr.exe ("not sure about it").

Do you have additional information?
What do you know about xfr.exe:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving xfr issues

A clean and tidy computer is the key requirement for avoiding problems with xfr. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To help you analyze the xfr.exe process on your computer, the following programs have proven to be helpful: Security Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. Malwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Other processes

xfr.exe [all]