me too, but it looks harmless enough
guvvy -
I am running win98SE, so my syntax for netstat may be a bit different assuming you run XP (I can't use either -b or -v here so not sure what you saw, I had to settle for -a). So try netstat -? to see the available options, and adjust my comments accordingly....
try netstat -n (this gives numeric IP addresses instead of domain names), then compare the port numbers to match up the corresponding connections. Do the ones that used to say 007guard.com now say 127.0.0.1 ? And notice the pairs of port numbers - is there something like port 1025 connecting to port 1026, with the next line being the reverse (connection from port 1026 back to port 1025 - your number pairs will probably differ)? I seem to have two sets of these cross coupled loopbacks.
Not sure exactly what is making these connections but I have heard that some AVs and some FWs set them up like this, also possibly some .NET applications, maybe your database thing is like that?
Assuming everything else seems normal, you might just fix your hosts file, to prevent future panics. It seemed to do the trick for mine, they now read as "localhost" instead.
PepiMK-
I had this also, adding the localhost address line seems to fix it. I do remember looking at hosts ages ago and it had this line then, and Spybot is the only thing I have that changes it, so at some point it must have got overwritten rather than merged? I suspect lots of people will have this situation. At any rate, it seems to merge correctly now, after adding the loopback address.
By the way, there are some quirks to the hosts file handling:
1) the "Lock hosts file" checkbox in IE Tweaks keeps re-checking itself and making hosts readonly no matter how many times I clear the checkbox and reset it in the file properties sheet. (Yes I've made sure to clear the checkboxes in my other programs as well.) The behavior always happens immediately after using either the Immunize panel, or the Hosts panel in the Tools section.
2) The Hosts tool Add Spybot Hosts List button seems to work similar to the Immunize with the Hosts checkbox marked. Not so for comparing Remove Spybot Hosts List button to the Immunize Undo - the Undo is almost instantaneous while the Remove button is horribly slow.... (although it does seem to finally end up working the same) shouldn't these be similar?
