none
007guard - how to remove?

    Question

  • I see in the W7 Task Manager/Resource Manager/Network listing that www.007guard.com is sucking up a bunch of resources.  I understand this is an internet monitor and malware, but nothing so far can remove it: AVG, SpyBot, Ad-Aware, Malwarebytes, SUPERantivirus and Windows Defender do not find it or deal with it.

    What must I do to remove it? 
    Saturday, January 31, 2009 12:10 PM

Answers

  • It's a beta, reformat.
    How did you get this on your system in the first place?
    The only true way to fully remove malware is to reinstall from clean media.
    Saturday, January 31, 2009 3:57 PM

All replies

  • It's a beta, reformat.
    How did you get this on your system in the first place?
    The only true way to fully remove malware is to reinstall from clean media.
    Saturday, January 31, 2009 3:57 PM
  • I have also seen the same thing happen to me almost a couple days after installing Windows 7 RC!  I haven't downloaded anything strange or non-standard.  I am pretty security conscious and use firefox 3.0 with no script and adblock plus, so I am not sure how it got into my system but it did.  Must be a non-patched vulnerability in W7.
    Monday, May 11, 2009 6:07 AM
  • I know this is old, but from what I found out it might still be relevant for many people.  If you are seeing 007guard.com in your Resource Manager or NETSTAT lists, ask yourself "do I have SpyBot installed, and have I immunized the system?".  If the answer is YES, then you probably shouldn't worry.

    Spybot changed Hosts file to point to localhost - 127.0.0.1 - for all malware remote addresses, such as 007guard.com.  Resource Manager and Netstat use this same Hosts file to name the connections, so any connection to localhost will falsely show as 007guard (it's at the top of the list).

     

    Monday, December 20, 2010 7:58 AM