OSes will have to start detecting processes that do a lot of disk read/write, and perhaps network upload, and quarantine them. Also, checkpoint/log based file systems like nilfs2 can let you roll back to any point before infection.