Without visiting a website or any other specific activity, I get a message that Norton is processing a threat. It is Heur.AdvML.B. This happens fairly regularly. The file is then normally a temp file (e.g. tmp0000bf70 in a sub-folder of a Windows temp directory). What can be the cause? I would have assumed if it came from an earlier internet session that Norton would have blocked it when visiting a site. But now it just turns up at random moments without any internet activity at that point in time.
Any suggestions how to find where this can be coming from?