i'm not sure. I'm not the most technologically savvy person.
I know that when i run the boot time scan, it finds the infected file, gives the option to delete then the message
Delete: Error 0xc0000022 {Access Denied}
I downloaded both utilities suggested. MoveOn couldn't do anything with it, gave an error message that access was denied. Unlocker said it was connected to 3 processes, winlogon, explorer and iexplore
I unlocked and tried to delete, no luck.
I am now running uniblue spy eraser to see if the winlogon is spyware itself.