C:\WINDOWS\System32\winlj.exe

[mfsi]

I have F-Prot Anti-Virus. The "Realtime Protector" Keeps warning me:
C:\Windows\System32\winlj.exe is a security risk named W32/Agent.AGH
I have scanned several times but F-Prot can't get rid of it..Have run Spy-Bot and Ad-Aware. Tried deleting the file, but got "Cannot delete winlj.exe, Access denied"

How do I get rid of this? The "Realtime Protector" screen keeps popping up everytime I touch anything on my computer and my home page in IE has been hijacked and my computer is running slow.

Help
Thanks
John

[3fingersalute]

sounds like spyware, read this thread (http://forums.windrivers.com/showthread.php?t=57348) for starters

[geeksRus]

download X-Cleaner Free (http://www.xblock.com/download-freeware.php) and restart your system in safe mode and run x-cleaner. you mite also want to download A-Squared Free (http://www.emsisoft.com/en/software/free/) these two utilities are often overlooked but do a really good job.

[shamus]

Follow 3FS and Geeks advice. Be sure you run the any spyware apps in Safe Mode.

[houseisland]

download X-Cleaner Free (http://www.xblock.com/download-freeware.php) and restart your system in safe mode and run x-cleaner.

Thanks. I'd not seen this one before. Another for the arsenal. Cool.

It seems to be quite agressive, so caution is suggested before just clicking the remove button.

It came up with two false positives on my machine. The fix suggested for one of these would have had me remove an apparently innocuous part of the ATI media player suite. The other false positive was a bunch of registry keys associatiated with an IE search bar which has never been on my machine.

Still it would seem to be a good tool in the hands of an experienced user. Thanks again.