My website raymond.cc blog statistic has always been monitored by BlogPatrol.
I find it quite good because it provides some very useful tracking stats such as real-time site statistics, reports, graphs and etc.
Few days ago whenever I visited BlogPatrol to check my web statistics, there is a very real popup with a notice as below:
NOTICE: If your computer has errors in the registry database of file system, it could cause unpredictable or erratic behavior, freezes and crashes. Fixing these errors can increase your computer’s performance and prevent data loss.
Would you like to install WinFixer 2005 to check on your computer for free? (Recommended)

There is an OK and Cancel button.

I noticed that there is a small Internet Explorer browser being opened at the below right corner of my screen.

I believe this is the window that has the codes to popup the Notice above.
After taking a look at the popup carefully, I believe that this is some kind of spyware named WinFixer.
I clicked on Cancel button and I thought it should go away and not bother me anymore but I was wrong!


Another window poped up and showing me an animation of scanning through my computer’s registry, shortcuts and harddrive for errors and believe it or not, it says that the free scan has found 42 System Errors.

I got fedup of this and closed this window again.

Another noticed popup again and it says:
NOTICE: You have not completed the errors scan. If your computer has errors in file system or Windows registry, it could cause unpredictable or erratic PC behavior, freezes, crashes and loss of data.
You need to install WinFixer 2005 to scan for and, if found, fix system errors now (Recommended)?

Looks like this WinFixer spyware will not give up in conning me.

I clicked on Cancel button and I got a shock because I got another popup saying:
WinFixer 2005 will scan your system for errors now.
Please select “RUN” or “OPEN” when prompted to start the installation.
This file has been digitally signed and independently certified as 100% free of viruses, adware and spyware.

I’ve got no choice but to click on the OK button.

Now it finally prompt me whether to download WinFixer.

I cancelled everything and finally no more popup.

As you can see, if you accidently chosen the wrong selection, WinFixer might have just installed on your computer.
I’ve got infected by WinFixer before and trust me, it’s a pain in the a$$.
I tried cleaning it with Spybot Search & Destroy together with Ad-Aware but couldn’t clean it 100%.
I found the 2 methods below to remove Winfixer, Virtumonde, Msevents, and Trojan.vundo (ATLDistrib Object) and it works effectively.

Please download VundoFix.exe to your desktop.

Double-click VundoFix.exe to run it.

Put a check next to Run VundoFix as a task.

You will receive a message saying vundofix will close and re-open in a minute or less. Click OK

When VundoFix re-opens, click the Scan for Vundo button.

Once it’s done scanning, click the Remove Vundo button.

You will receive a prompt asking if you want to remove the files, click YES

Once you click yes, your desktop will go blank as it starts removing Vundo.

When completed, it will prompt that it will shutdown your computer, click OK.

Turn your computer back on.

Alternate fix: (use only if the above fix didn’t work)
Please download VirtumundoBegone to your desktop.

Run VirtumundoBeGone.exe and follow the instructions. Do not worry if you see a BLUE SCREEN “Fatal Error” Message, this is normal and expected.

When it has finished, reboot.

Hope your computer is free from WinFixer Virtumonde, Msevents, and Trojan.vundo (ATLDistrib Object) after scanning and cleaning using the methods above 😉