I'm on an iMac using macOS 10.12.3, and adobe acrobat professional 8.1.0. It worked fine up to about 2 months ago when every once in a while I get the following message:
What does this mean, and how can I get rid of it? I "terminate" and the program still seems to work, but when it pops up it is annoying.
Thanks.
RansomWhere.app displays the locking files message. It's official name is RANSOMEWHERE?. 7za is a file compression program AES 256 bit encryption and password protection options. If you don't like the warning either uninstall RANSOMEWHERE? or allow Adobe to run 7za.
When RANSOMEWHERE? detects an untrusted app encrypting files it displays a message with Allow and Terminate buttons. Select Allow to let the app, 7za, run and to add it to RANSOMEWHERE?'s trusted list. Select Terminate to immediately kill the app. Terminating the app does not add it to a malware list. Each time the untrusted app runs RANSOMEWHERE? will report it.
Today RANSOMEWHERE? reported Adobe was quickly encrypt files with 7za. I clicked the Terminate button to give myself time to investigate. I found a matching log entry by searching for 7za in all log files using the Console app: /Applications/Utilities/Console
I didn't find information on what Adobe is compressing and encrypting 7za. I suspect that Adobe is actually running 7za for legitimate reasons. If you find out, please update the post.
Note:
Reset RansomWhere if you change your mind about a app you Allow to run.
$ sudo /Library/RansomWhere/RansomWhere -reset
RANSOMWHERE: reset
a) removed list of installed/approved binaries
b) stopped, then (re)started the launch daemon
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
AdChoices