KeRanger
What can we do about KeRanger trojan?
Mac Pro (Mid 2010), OS X Yosemite (10.10.5)
This article:
suggests that Apple have already acted.
You can make a difference in the Apple Support Community!
When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.
When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.
2 replies
Although Apple has taken steps to prevent you from installing KeRanger, if you are among those who downloaded the Transmission v2.90 dmg file on or after 4 March, installed and launched the application, then you are already infected and encryption will begin three days after you first launched the malware ladened version of Transmission, so as early as Monday morning.
The best thing you can do is download and install Transmission v2.92 from the developer https://www.transmissionbt.com/.
Launch it and it that remove the malware.
You can also manually remove the following three invisible files from your invisible /Users/<UserName>/Library/ folder
- .kernel_complete
- .kernel_pid
- .kernel_time
which is far more difficult.
KeRanger