这是一个创建于 3183 天前的主题，其中的信息可能已经有所发展或是发生改变。
20 条回复 • 2016-03-09 15:24:06 +08:00
 |
1
cheny95 2016-03-07 11:45:24 +08:00
2.84 (14306) 路过
|
 |
2
tracyone 2016-03-07 11:46:02 +08:00 via Android
呵呵敲诈勒索，传播计算机病毒，入侵网站，够那些 cracker 蹲个十几年了
|
 |
3
RoberMac 2016-03-07 11:57:17 +08:00
"Users who have directly downloaded Transmission installer from official website after 11:00am PST, March 4, 2016 and before 7:00pm PST, March 5, 2016, may be been infected by KeRanger."
|
 |
4
xenme 2016-03-07 12:17:07 +08:00 via iPhone
都挂 nas 下载，没这问题。
|
 |
5
wbsdty331 2016-03-07 12:20:39 +08:00
帖子里说这个勒索软件有有效的开发证书，那不是开发者的信息苹果那里会有吗，这人还跑的了？
|
 |
6
wushuang 2016-03-07 12:27:19 +08:00
我去， 2 月份装过一个版本，太危险了
|
 |
8
boywang004 2016-03-07 13:50:23 +08:00
勒索软件比一般的木马病毒都可怕……不过话说这种勒索软件运行时不会要求 root 权限么？
|
 |
9
xbb7766 2016-03-07 14:41:19 +08:00 via Android
擦，这软件好久没发布新版了，一更新就来个大新闻也是醉了……
|
 |
10
SilentDepth 2016-03-07 14:48:52 +08:00
基于行为检测的安全软件有可能预防这类勒索程序吗？
|
 |
11
lv_v 2016-03-07 15:24:07 +08:00
我擦，周末升级了 2.90 啊~！
这几天一直没关机过，刚才升级到 2.92 了，目前没发现什么不正常情况，怎么检测是否中招及清除感染啊？ |
 |
12
hahasong 2016-03-07 15:24:54 +08:00
昨天提示我升级被我拒绝的路过，下载软件能用就行，越升越卡，广告越多。 ut 就是鲜活的例子
|
|
13
lv_v 2016-03-07 15:30:39 +08:00
按以下步骤检查我貌似没中招……
We suggest users take the following steps to identify and remove KeRanger holds their files for ransom: 1. Using either Terminal or Finder, check whether /Applications/Transmission.app/Contents/Resources/ General.rtf or /Volumes/Transmission/Transmission.app/Contents/Resources/ General.rtf exist. If any of these exist, the Transmission application is infected and we suggest deleting this version of Transmission. 2. Using “ Activity Monitor ” preinstalled in OS X, check whether any process named “ kernel_service ” is running. If so, double check the process, choose the “ Open Files and Ports ” and check whether there is a file name like “/Users/<username>/Library/kernel_service ” (Figure 12). If so, the process is KeRanger ’ s main process. We suggest terminating it with “ Quit -> Force Quit ”. 3. After these steps, we also recommend users check whether the files “.kernel_pid ”, “.kernel_time ”, “.kernel_complete ” or “ kernel_service ” existing in ~/Library directory. If so, you should delete them. |
 |
14
Showfom 2016-03-07 17:10:54 +08:00 via iPhone
还好没装
|
|
15
Showfom 2016-03-07 17:11:17 +08:00 via iPhone
@boywang004 有证书了都
|
 |
16
lutla 2016-03-07 17:43:56 +08:00
挂 nas ＋ 1
|
 |
17
laiyingdong 2016-03-07 21:59:26 +08:00
|
 |
18
chyiz 2016-03-08 07:42:26 +08:00
@boywang004 勒索软件不需要 root 权限，因为它只加密你的用户文件。一般你所有的资料，比如文档，照片都在你自己用户名下。全加密了就够你喝一壶了。
|
 |
19
killsting 2016-03-08 15:56:22 +08:00
|
 |
20
Shoegazer 2016-03-09 15:24:06 +08:00
正好那几天不知道为啥手贱在线升级了 2.90 ，还好升级之后没运行，换了 2.92 之后一搜索，没有中毒特征文件。
|
Select Language