按以下步骤检查我貌似没中招……
We suggest users take the following steps to identify and remove KeRanger holds their files for ransom:
1. Using either Terminal or Finder, check whether /Applications/
Transmission.app/Contents/Resources/ General.rtf or /Volumes/Transmission/
Transmission.app/Contents/Resources/ General.rtf exist. If any of these exist, the Transmission application is infected and we suggest deleting this version of Transmission.
2. Using “ Activity Monitor ” preinstalled in OS X, check whether any process named “ kernel_service ” is running. If so, double check the process, choose the “ Open Files and Ports ” and check whether there is a file name like “/Users/<username>/Library/kernel_service ” (Figure 12). If so, the process is KeRanger ’ s main process. We suggest terminating it with “ Quit -> Force Quit ”.
3. After these steps, we also recommend users check whether the files “.kernel_pid ”, “.kernel_time ”, “.kernel_complete ” or “ kernel_service ” existing in ~/Library directory. If so, you should delete them.