Edit: Since this question turned out to be off-topic here, I've re-posted it to Ask Different.

I use RansomWhere, a tool to protect from ransomware.

As far as I understand, RansomWhere just warns me whenever an app tries to encrypt data. It's up to the user to judge whether they trust a process or not. (And whether the application is one which should need to encrypt data.) The user is given the choice of Allow or Terminate each time there is a warning. It has warned me about several apps I trust and that I figure did need to encrypt data, and I have simply clicked Allow.

However, just now I got a warning about a process I don't know what was. The message said "is encrypting data", so I figuredd I had to hurry, so I just clicked Terminate immediately after seeing that I wasn't sure what the process actually was. After clicking Terminate, the dialogue box disappeared, and I heard nothing more from RansomWhere regarding the issue.

Now, I want to know what this process actually was and what was going on. I don't remember the details given in the message, just that I wasn't sure which process it was. I wish I would have taken a second to take a screenshot before pressing Terminate, but unfortunately, I didn't.

How can I find out which process this was and what was going on?

  • 1
    use RansomWhen? Jul 13, 2016 at 21:16
  • this isn't about informations security - it's more an application usage question. migrate to superuser? Jul 13, 2016 at 21:48
  • @JamesLu Not sure. Better ask the mods.
    – Fiksdal
    Jul 13, 2016 at 21:53
  • Have you checked in Console? Jul 13, 2016 at 21:54
  • @AlexanderO'Mara How?
    – Fiksdal
    Jul 13, 2016 at 21:57


Browse other questions tagged .