Skip to main content
Participant
February 26, 2018
Question

McAfee report Trojan C:\ProgramData\Adobe\ARM\{291AA914-A987-4CE9-BD63-AC0A92D435E5}\BIT691A.tmp. Is the BIT691A.tmp file a legitimate adobe file?

  • February 26, 2018
  • 1 reply
  • 8537 views

We have been getting McAfee deletion notification for BIT691A.tmp from the Adobe ARM folder.  The computers that got this trojan notification have adobe reader installed. Can anyone tell me if this is a legitimate file? I've spoken to a few Adobe representatives and I am not getting any definite answers. They all tell me to post on this forum for my answer. 

Thanks in advance for any advice on this matter.

Rattanak

    This topic has been closed for replies.

    1 reply

    Participating Frequently
    February 26, 2018

    This file looks like unfinished BITS download (About BITS (Windows) )

    While download is in progress, BITS creates a file with temporary name.

    BITS is used by Adobe Updater.

    Most likely the file is valid.

    Participant
    February 26, 2018

    Thank you for the reply LeoAdobX.

    Do you know or have heard of why McAfee is flagging the BIT temp file as a trojan?

    Thanks,

    Rattanak

    Participant
    February 27, 2018

    I did the same thing with McAfee. I sent them the information to their virus research team but have not heard back from them. I was hoping to get some solid answers from Adobe support but each call redirected me to this forum.


    Just to follow up, Symantec did get back to me and confirmed it was a false positive and are updating their signatures.