This particular one also attempts to disable your virus protection. From what I read, you could search for wink*.exe as evidence that you've been infected.