If winject is no longer running, it should not be detected, unless hackshield is scannz0ring your files. hah. pull up a task manager ( or better yet, process explorer), and watch the processes before it detects it and see if the process has fully closed.