This may or may not already have been posted: [**Transmission (BT app) urgent security update. Possibly infected with KeyRanger** (Cryptolocker-style malware](http://9to5mac.com/2016/03/06/first-os-x-ransomware-detected-in-the-wild-will-maliciously-encrypt-hard-drives-on-infected-macs/#more-421842) Symptoms: - "kernel_service" process running - Existence of "/Applications/Transmission.app/Contents/Resources/General.rtf" or /Applications/Transmission.app/Contents/Resources/ General.rtf"

Symptoms:

"kernel_service" process running
Existence of "/Applications/Transmission.app/Contents/Resources/General.rtf" or /Applications/Transmission.app/Contents/Resources/ General.rtf"
Existence of ".kernel_pid", ".kerneltime", ".kernelcomplete", or "kernel_service" files in ~/Library (note the hidden files)

2016-03-07T00:20:02Z