scan finds same 3 mbam files every time

[squire]

last 3 months, when doing a system scan mbam reports  mrxdav.sys, mwac.sys, mbam.sys, tdx.sys,   all as  "unknown.rootkit.driver:,  in windows\system32\drivers\ .

 

I quarantine all of them, and next scan they are reported again.

 

What's the deal?

[Firefox]

Hello and Welcome to Malwarebytes

Being that you are probably infected, feel free to follow the instructions below to receive free, one-on-one expert assistance in checking your system and clearing out any infections and correcting any damage done by the malware.

Please see the following pinned topic which has information on how to get help with this: Available Assistance for Possibly Infected Computers

Thank you

[squire]

might it matter that avast rootkit scans hasn't found anything, and rubotted (rootkit scanner) hasn't found anything?

 

could they be false postives?

[Firefox]

Hard to tell without looking at logs, and the files themselves.

If you feel these are false positives then you need to submit them to the False Positives Section. Make sure you read the topic titled Please read before reporting a false positive before submitting your samples.

[squire]

I have submitted the  4 files and log .  

 

Interestingly, when running the scan again to get a log for submission, per the submission instructions, only 2 of the files were found.  4 were found a few hours ago.  the two that weren't found on the latest scan had been restored. the other two recreated at reboot.

[shadowwar]

Being helped in fp forum. This is we believe do to Rollback RX being installed.

[squire]

yes,  submitted files found to be ok.  I will get around to reinstalling rollback and see what happens.