From: "Buffalo" <Eric@nada.com.invalid>

| Winnit\System32\sysrestore was submitted just now.
| It is back in quarantine in MBAM now.


False Positive. It is being removed from MBAM definitions.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp