Are these rookits a false postive

[DavidR]

Yes, as I mentioned “the detection is based on the hidden activity, after the updates are complete these should be gone if you run another scan.”