[Yosemitest]

Thank you for any help you might offer.

[MagUSNRET]

I think it means you have not donated enough $$ to Free Republic...but thats just a guess ;-)

[Greetings_Puny_Humans]

Don’t worry about it, it can’t be removed. It’s the file the NSA installed on your computer so it can access your system at any time.

If you’re not a criminal you have nothing to hide, right?

[TomGuy]

It does not show up in Google.

But, I would not try to run that tmp file.

If your virus program found it, quarantine it and let the antivirus program remove it.

[hosepipe]

Wipe... then wash yer hands..

[InterceptPoint]

Google has already indexed this post. Amazing!

[UCANSEE2]

Cut and paste this into Google.

you should get a multitudes of answers.

[ THREAT “OSX/CLICKAGENT.FLA” Found In “opr0ETEF.tmp” File ? ]

[GeronL]

have you Googled this? just the name of the file.

..............

by the way, now people can build their own Linux..

http://www.linuxfromscratch.org/

[AppyPappy]

http://www.malwarebytes.org

[Ron C.]

R U running a mac?

[OrangeHoof]

Can you recall anything you downloaded the morning of the 9th? An .exe file is a program that runs something so it should be treated cautiously. If Google has no answer for it, try some of the anti-virus sites in their chats and knowledge bases. It’s unlikely you’re the first person to get this.

If you have been running fine for the past 10 days, it is probably harmless but then last night was a full moon.

[GeronL]

http://www.downloadcollection.com/software/click-to-count.htm

Quick Agent

automatic email generator

possible connection?

[this_ol_patriot]

If you’re running Safari then check this out:

http://blog.malwarebytes.org/intelligence/2013/08/fake-flash-player-update-causes-mayhem-in-your-browser/

Malwarebytes flags it as Trojan.ClickAgent.FLA.

[this_ol_patriot]

It’s actually hitting all browsers so maybe that’s it.

[Yosemitest]

You might want to read this.

Once again, fraudulent developers are attempting to fool people into installing their adware by signing their file—which pretends to be an Adobe Flash Player update—with a Developer ID. This tactic is not new, but why try something new when the tried and true tactics are apparently still working?



This new adware has versions for both Windows and Mac OS X, and works as an extension for Chrome, Firefox and Safari to different extents based on the operating system. For Macs, because the installer is a Windows executable auto-extractor, there’s no direct installation. (Continued)

[phockthis]

sfl

[Jeff Chandler]

Cross-Platform Adware Poses as Flash Player Update

Posted on August 20th, 2013 by Lysa Myers

Once again, fraudulent developers are attempting to fool people into installing their adware by signing their file—which pretends to be an Adobe Flash Player update—with a Developer ID. This tactic is not new, but why try something new when the tried and true tactics are apparently still working?

FlashPlayer11

This new adware has versions for both Windows and Mac OS X, and works as an extension for Chrome, Firefox and Safari to different extents based on the operating system. For Macs, because the installer is a Windows executable auto-extractor, there’s no direct installation.

This scam-extension appears to be found on a number of different types of websites, such as adult-themed and file-sharing sites. Once downloaded onto a user’s machine, it must then be installed in order to execute. Once it’s running, it places ads (sometimes pornographic in nature) into legitimate websites, which can make it appear that even children’s sites are serving these lascivious ads. The ads are not served by the usual mechanisms, so they are not blocked by ad-blockers.

The adware installer is signed by an Apple Developer ID belonging to “martingrey@mailinator.com,” which expires in a month (on September 22), at which point it will no longer be recognized as valid.

http://www.intego.com/mac-security-blog/cross-platform-adware-poses-as-flash-player-update/

[gura]

F-Secure Rescue CD

[Vendome]

[Bloody Sam Roberts]

It's a cross platform adware posing as a Flash Player update.

Malware authors are using it to trick people into installing their latest payload.

This I found by simply Googling "OSX/CLICKAGENT.FLA".

I would wipe it with your AV program and get rid of the .tmp file.