XFR Process ???

[_m_]

Anyone know or have an idea of what the XFR.exe process is or where it comes
from ? It seems to be tieing up a lot of CPU, memory and network resources.
Is this process a normal process ? I have killed it multiple times (speeds
up the servers drastically) but doesn't seem to harm them in any way.
Anyone have this process on their servers ? I can not locate any reference
to it in the registry. The only reference I have found to it on Microsoft
was in regards to dns zone transfers, but my dns server are set not to
transfer zones.

Any ideas ?

TIA

 

[Dave Patrick]

Sounds like spyware or some sort of trojan.

 

[dcdon]

http://www.computing.net/security/wwwboard/forum/7387.html
Anyone know or have an idea of what the XFR.exe process is or where it comes
from ? It seems to be tieing up a lot of CPU, memory and network resources.
Is this process a normal process ? I have killed it multiple times (speeds
up the servers drastically) but doesn't seem to harm them in any way.
Anyone have this process on their servers ? I can not locate any reference
to it in the registry. The only reference I have found to it on Microsoft
was in regards to dns zone transfers, but my dns server are set not to
transfer zones.

Any ideas ?

TIA

 

[_M_]

I have tracked it down to the file being in a "cba" directory. Anyone know
what this directory is ??? I can not End Process in task manager but if I
do a Kill process at the DOS prompt, everything runs so much faster and I
even have application that will actually start on the 1st click (usually
take 5-10 clicks to start some.)

 

[_M_]

Ok... I've track it down to having to do with DFS which will now NOT list
the DFS root in the console, even after I restarted the Intel File Transfer
service which is what uses the XFR process.

This is getting strange.