KeRanger

This article:

http://appleinsider.com/articles/16/03/06/malware-infected-transmission-29-app-t hreatened-os-x-users-stopped-by-xprotect

suggests that Apple have already acted.

Although Apple has taken steps to prevent you from installing KeRanger, if you are among those who downloaded the Transmission v2.90 dmg file on or after 4 March, installed and launched the application, then you are already infected and encryption will begin three days after you first launched the malware ladened version of Transmission, so as early as Monday morning.

The best thing you can do is download and install Transmission v2.92 from the developer https://www.transmissionbt.com/.

Launch it and it that remove the malware.

You can also manually remove the following three invisible files from your invisible /Users/<UserName>/Library/ folder

• .kernel_complete
• .kernel_pid
• .kernel_time

which is far more difficult.