Skip to main content
Participant
February 26, 2018
Question

McAfee report Trojan C:\ProgramData\Adobe\ARM\{291AA914-A987-4CE9-BD63-AC0A92D435E5}\BIT691A.tmp. Is the BIT691A.tmp file a legitimate adobe file?

  • February 26, 2018
  • 1 reply
  • 8510 views

We have been getting McAfee deletion notification for BIT691A.tmp from the Adobe ARM folder.  The computers that got this trojan notification have adobe reader installed. Can anyone tell me if this is a legitimate file? I've spoken to a few Adobe representatives and I am not getting any definite answers. They all tell me to post on this forum for my answer. 

Thanks in advance for any advice on this matter.

Rattanak

    This topic has been closed for replies.

    1 reply

    Participating Frequently
    February 26, 2018

    This file looks like unfinished BITS download (About BITS (Windows) )

    While download is in progress, BITS creates a file with temporary name.

    BITS is used by Adobe Updater.

    Most likely the file is valid.

    Participant
    February 26, 2018

    Thank you for the reply LeoAdobX.

    Do you know or have heard of why McAfee is flagging the BIT temp file as a trojan?

    Thanks,

    Rattanak

    Participant
    February 26, 2018

    Did you ever get any further information on this?  We're receiving the same results from Symantec Endpoint Protection flagging these files in the same directory and just started today.  We submitted the file to Symantec to determine if it is a false positive but haven't heard anything back yet.