这是一个创建于 3562 天前的主题，其中的信息可能已经有所发展或是发生改变。
20 条回复 2016-03-09 15:24:06 +08:00
 | 1 cheny95 2016-03-07 11:45:24 +08:00 2.84 (14306) 路过 |
 | 2 tracyone 2016-03-07 11:46:02 +08:00 via Android 呵呵敲诈勒索，传播计算机病毒，入侵网站，够那些 cracker 蹲个十几年了 |
 | 3 pakto 2016-03-07 11:57:17 +08:00 "Users who have directly downloaded Transmission installer from official website after 11:00am PST, March 4, 2016 and before 7:00pm PST, March 5, 2016, may be been infected by KeRanger." |
 | 4 xenme 2016-03-07 12:17:07 +08:00 via iPhone 都挂 nas 下载，没这问题。 |
 | 5 wbsdty331 2016-03-07 12:20:39 +08:00 帖子里说这个勒索软件有有效的开发证书，那不是开发者的信息苹果那里会有吗，这人还跑的了？ |
 | 6 wushuang 2016-03-07 12:27:19 +08:00 我去， 2 月份装过一个版本，太危险了 |
 | 8 vela 2016-03-07 13:50:23 +08:00 勒索软件比一般的木马病毒都可怕……不过话说这种勒索软件运行时不会要求 root 权限么？ |
 | 9 xbb7766 2016-03-07 14:41:19 +08:00 via Android 擦，这软件好久没发布新版了，一更新就来个大新闻也是醉了…… |
 | 10 SilentDepth 2016-03-07 14:48:52 +08:00 基于行为检测的安全软件有可能预防这类勒索程序吗？ |
 | 11 lv_v 2016-03-07 15:24:07 +08:00 我擦，周末升级了 2.90 啊~！ 这几天一直没关机过，刚才升级到 2.92 了，目前没发现什么不正常情况，怎么检测是否中招及清除感染啊？ |
 | 12 hahasong 2016-03-07 15:24:54 +08:00 昨天提示我升级被我拒绝的路过，下载软件能用就行，越升越卡，广告越多。 ut 就是鲜活的例子 |
| 13 lv_v 2016-03-07 15:30:39 +08:00 按以下步骤检查我貌似没中招…… We suggest users take the following steps to identify and remove KeRanger holds their files for ransom: 1. Using either Terminal or Finder, check whether /Applications/Transmission.app/Contents/Resources/ General.rtf or /Volumes/Transmission/Transmission.app/Contents/Resources/ General.rtf exist. If any of these exist, the Transmission application is infected and we suggest deleting this version of Transmission. 2. Using “ Activity Monitor ” preinstalled in OS X, check whether any process named “ kernel_service ” is running. If so, double check the process, choose the “ Open Files and Ports ” and check whether there is a file name like “/Users/<username>/Library/kernel_service ” (Figure 12). If so, the process is KeRanger ’ s main process. We suggest terminating it with “ Quit -> Force Quit ”. 3. After these steps, we also recommend users check whether the files “.kernel_pid ”, “.kernel_time ”, “.kernel_complete ” or “ kernel_service ” existing in ~/Library directory. If so, you should delete them. |
 | 14 Showfom PRO 还好没装 |
| 15 Showfom PRO @boywang004 有证书了都 |
 | 16 lutla 2016-03-07 17:43:56 +08:00 挂 nas ＋ 1 |
 | 17 laiyingdong 2016-03-07 21:59:26 +08:00 |
 | 18 chyiz 2016-03-08 07:42:26 +08:00 @boywang004 勒索软件不需要 root 权限，因为它只加密你的用户文件。一般你所有的资料，比如文档，照片都在你自己用户名下。全加密了就够你喝一壶了。 |
 | 19 killsting 2016-03-08 15:56:22 +08:00 |
 | 20 Shoegazer 2016-03-09 15:24:06 +08:00 正好那几天不知道为啥手贱在线升级了 2.90 ，还好升级之后没运行，换了 2.92 之后一搜索，没有中毒特征文件。 |
Select Language