Unknown.Rootkit.Driver virtualbox and other files

[mustwakeup]

Hi!

 

I think this is false positives. I have roolback last version instaled. Thanks jn advance.

false.txt

VBoxUSBMon.zip

[miekiemoes]

Hi,

This isn't really a false positive since our scanner correctly sees a driver modification when comparing low level vs the windows API.

And in this case, it's indeed caused by Rollback you have installed, because whenever you install new software that involves a change to a driver (in this case Virtualbox), Rollback forges this file - and is thus being detected by our engine (valid detection as Unknown.Rootkit.Driver - as some Rootkits do exactly the same.

 

That's why, please reboot your PC so Rollback "accepts" the change of the new virtualbox driver and doesn't forge it anymore. Then see if malwarebytes is still detecting it.

If detection is still present, temporary uninstall Rollback, reboot and reinstall Rollback again. Alternatively, you can add the detection to your ignore list as well.