Below the company logo you will see several tabs, each of those ones has a few options. The application has a pleasant and user-friendly interface. This tool has the heuristics engine, which is able to identify the difference between false positives and insecure programs. It uses the same malware detection and removal technology as the paid Malwarebytes version and is also effective against trojans, worms, rootkits, spyware, keyloggers, dialers and many other dangerous applications.

both cases you need to be willing to give up your snapshots.Malwarebytes Anti-Malware Free is a great freeware tool that detects and destroys different malware programs. You either need to turn off your RootKit scanning in MalwareBytes, or give up your snapshots following a Windows update either with an uninstall/install at the current snapshot, or with a Rollback Baseline Update. I do not think they are capable of doing this. There's really no way to solve this problem unless HDS was to rewrite the Direct Disk API and obfuscate it the same way it does the FileSystem. Since that API is not obfuscated by Rollback (I use it all the time to look at direct blocks on the surface of the disk), the RootKit scanner sees a disconnect in the item being checked and immediately flags it as a RootKit. Now the RootKit scanner takes the FileSystem information, and uses the Direct Disk read API to see if the item is really there. it tells users of the FileSystem that pieces of the object are in one place, but if the item (or its parts) has ever been changed, it's really located somewhere else on the disk. If you haven't already figured it out, the FileSystem path, by design, is obfuscated by Rollback due to its Redirect-on-Write technology. In the process of chasing these down, a good RootKit scanner will check the FileSystem path, then use the Windows API for disk surface reading and see if that FileSystem path is real as far as the item being checked. One of the most common obfuscations put in place by a RootKit is a file entry with a FileSYstem path that looks kinda normal, but underneath that entry, the RootKit does not follow what appears to be its path. Due to a question over on the RBrx Forums, it's probably worth a mention over here.

Malwarebytes scan for rootkits disabled