Skip to main content
individualistic_Coral0D4C
Participant
Feb 26, 2018 4:20 PM UTC
Question

McAfee report Trojan C:\ProgramData\Adobe\ARM\{291AA914-A987-4CE9-BD63-AC0A92D435E5}\BIT691A.tmp. Is the BIT691A.tmp file a legitimate adobe file?

We have been getting McAfee deletion notification for BIT691A.tmp from the Adobe ARM folder.  The computers that got this trojan notification have adobe reader installed. Can anyone tell me if this is a legitimate file? I've spoken to a few Adobe representatives and I am not getting any definite answers. They all tell me to post on this forum for my answer. 

Thanks in advance for any advice on this matter.

Rattanak

    This topic is closed to new replies. Start a new post to keep the conversation going.

    8 replies

    LeoUpdaterX
    Participating Frequently
    Feb 26, 2018 6:27 PM UTC

    This file looks like unfinished BITS download (About BITS (Windows) )

    While download is in progress, BITS creates a file with temporary name.

    BITS is used by Adobe Updater.

    Most likely the file is valid.

    Translate
    individualistic_Coral0D4CAuthor
    Participant
    Feb 26, 2018 6:48 PM UTC

    Thank you for the reply LeoAdobX.

    Do you know or have heard of why McAfee is flagging the BIT temp file as a trojan?

    Thanks,

    Rattanak

    Translate
    erics36326711
    Participant
    Feb 26, 2018 9:16 PM UTC

    Did you ever get any further information on this?  We're receiving the same results from Symantec Endpoint Protection flagging these files in the same directory and just started today.  We submitted the file to Symantec to determine if it is a false positive but haven't heard anything back yet.

    Translate
    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices