Multiple Programs – GUARD32.DLL, GUARD32.EXE

Guard32.dll is an AppInit DLL that installs with Comodo Personal Firewall by the Comodo Group. A file called cpf.exe (the main executable) will also appear on your system. This firewall promises protection from internal and external attacks from malicious programs or Trojans and to help prevent identity theft. More information can be found at http://www.personalfirewall.trustix.com/. If you use this as your firewall program, you'll want to leave this file in place.

If you have a file called guard32.exe in your Windows\System32 folder that is described as "Micrsoft driver" (notice the missing "o" in Micrsoft), you may have a variant of the W32/Sdbot-PB worm. You'll find more information at http://www.sophos.com/security/analyses/w32sdbotpb.html. We'd recommend removing this file using WinPatrol. First kill it under Active Tasks then remove it from your Startup Programs. If a file called windrive.exe appears on your system, remove that as well. If running WinPatrol 8.x or later, right click each file then select "Delete file on Reboot".

Safe if not Virus

Comodo Group