BleepingComputer.com: Rootkit Buster Problem

Hello,
I downloaded TrendMicro Rootkit Buster several weeks ago, and it has never found anything wrong/bad on my computer until now. It found 2 items. I tried to delete the items, but it would not allow me to do so. I am TOTALLY CLUELESS what they are or what they mean. I Googled both of them, but could not find any information (that I understand). I don't even know what a Hooked Service API is. Could someone be so kind as to look at the copy/paste, and tell me if it is a virus or the likes, and how to remove it or even if I should. Thank you in advance for helping. Regards, Dad

--== Service Win32 API Hook List ==--
[HOOKED_SERVICE_API]:
Service API : ZwCreateKey
Image Path : Lbd.sys
OriginalHandler : 0x80622048
CurrentHandler : 0xb80f887e
ServiceNumber : 0x29
ModuleName : Lbd.sys
SDTType : 0x0

[HOOKED_SERVICE_API]:
Service API : ZwSetValueKey
Image Path : Lbd.sys
OriginalHandler : 0x80620708
CurrentHandler : 0xb80f8bfe
ServiceNumber : 0xf7
ModuleName : Lbd.sys
SDTType : 0x0

Lbd.sys is part of Ad-Aware, which I presume you have installed on your system.

http://www.bleepingcomputer.com/startups/Lbd.sys-24596.html

Nothing to worry about.

AustrAlien, on 20 August 2011 - 04:11 AM, said:

Hello AA, Thank you for replying to my question. Yes, I do have Ad-Aware on my computer. What puzzles me is: I've had Ad-Aware on my computer for some time, and when RootkitBuster scanned it in the past, those 2 did not show. Last night was the first time they appeared. What would make them suddenly appear last night and not last week or anytime earlier? Again, thank you, Dad

Dad5026, on 20 August 2011 - 09:07 AM, said:

I'm sorry: I cannot even make any suggestions as to why that might have happened. It doesn't help that I am not at all familiar with Rootkit Buster.

Perhaps someone else may have an idea?

Hello,

I'm moving this topic to the AntiVirus, Firewall and Privacy Products and Protection Methods forum for you.

I can't specifically answer your question, but I have some general ideas.

There are times when an updated version of a security product will flag things that it didn't flag before. Sometimes what it flags are indeed malicious files. Other times, it is false positives. It depends on the changed definitions.

Another possibility, is that you updated the things it was scanning, and something about the new files matched the definitions in the scanner's database, causing them to be flagged.

Orange Blossom