Hello,
I would have a suggestion for the immunize function. In particular for the modification of the hosts file.
I don't know if it is the immunize function that sometimes messes up or if the user have messed up their hosts before, but about once every two month I treat a case on the forums where the user is terribly scared cause his PC is connecting to 007guard.com all over the place.

The reason usually is that 127.0.0.1 localhost is missing and the first line has become 127.0.0.1 007guard.com, so that all connections connectiong to localhost are then showing as connecting to 007guard.com.
I thought it might be worth a shot to add "127.0.0.1 localhost" as a first line of the list for immunizing hosts, to prevent this kind of scare. I imagine this would be easy to implement and would prevent the FP.

regards myrti