7 Replies Latest reply: Nov 2, 2010 4:32 AM by cleverfiles
Jeremy Kohn Level 1 Level 1 (25 points)
How do you get rid of a process that keeps rising from the dead?
Almost as soon as I kill the process cfbackd, it returns with a different process ID.


Apparently, cfbackd is a background daemon for the data recovery software Disk Drill.
And it is now using nearly 100% of (one core of) my CPU, making my computer run hot.

My first solution: Uninstall Disk Drill* and restart -- but no apparent effect.

Next: Log in to admin account,** open Terminal, and kill the process using sudo (since it's a process that belongs to the root user).
sudo kill -15 3196
(where 3196 is the current process ID of cfbackd.)

And sure enough, the process disappeared, only to reappear a moment later with a different process ID. (Same result if instead of -15, I used -9, -2, or -1.)


*I uninstalled Disk Drill with AppCleaner and then with CleanMyMac. So if there are any other active files around, I don't know where.
Oh, and I removed "Disk Drill" from my list of login items.


**The kill command doesn't seem to work in Terminal in my regular account, even when I put in the administrator password. That's why I used the admin account for it.
Note that the process shows up in Activity Monitor, but only in my regular user account. But it also shows up in Terminal in both accounts.

MacBook Pro 15" Early 2008, Mac OS X (10.5.8)
  • roam Level 6 Level 6 (13,560 points)
    Log out and in again and see if its gone.
  • jsd2 Level 5 Level 5 (6,200 points)
    I took a look inside the Disk Drill.app bundle, but I didn't install it. It contains a second app bundle named BackService, and contains a property list file named com.cleverfiles.cfbackd.plist, which in TextEdit looks like this:

    <?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE plist
    PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN"
    <plist version="1.0">
    <string>/Library/Application Support/CleverFiles/BackService.app/Contents/MacOS/cfbackd</string>

    This is not an area I know much about, but this .plist file might be a launch daemon or launch agent for cfbackd, which is the executable contained in BackService.app. BackService.app apparently gets installed in /Library/Application Support/CleverFiles.

    AppCleaner and CleanMyMac may have already found and removed these items, but I would check manually.
    So look for this file:
    in these locations:

    and look for this folder:
    *HD>Library>Application Support>CleverFiles*

    If you find these items, trash them both and restart.
  • Jeremy Kohn Level 1 Level 1 (25 points)
    Alas, cfbackd is no mere mortal process that can be arrested by a mere logout or even a restart.
  • Jeremy Kohn Level 1 Level 1 (25 points)
    OK, I found com.cleverfiles.cfbackd.plist under HD>Library>LaunchDaemons.

    I also found BackService in HD>Library>Application Support>CleverFiles.

    They're both in the trash now. (Though I can't empty the trash completely because BackService is in use.)

    Restarting now to see what happens.
  • Jeremy Kohn Level 1 Level 1 (25 points)
    Success! No more CPU overload -- hopefully can get the temperature down now.

    Many thanks to thee, my friend.
  • jsd2 Level 5 Level 5 (6,200 points)
    Glad it worked!

    The developer of Disk Drill really should have provided an uninstaller for it.
  • cleverfiles Level 1 Level 1 (5 points)
    Disk Drill 1.0.57 already has this bug fixed, and includes the uninstaller as well. Details in our knowledgebase

    Update Disk Drill data recovery software now

    Apologies for the delayed fix.