Trojan Vundo Removal Guide

Threat Level:
9/10
Rate this Article:
Comments (0)
Article Views: 25124
Category: Trojans

There are simply too many threats facing healthy PCs these days to go at protecting your PC alone – and Trojan Vundo is the perfect example. This vicious and malicious Trojan enters the system surreptitiously and roots itself in the system without seeking action or permission from the user.

The entire purpose behind Trojan Vundo is to spam the user with various annoying commercial pop up ads, as well as to download more malware onto the system without the user even knowing about it. Other annoying symptoms associated with Trojan Vundo include slowing down the infected PC to the point of being nearly completely unmanageable, and it will increase erratic system behavior.

This Trojan is spread via a variety of ways, which includes through infected e-mail attachments and through social networking applications. What adds to the danger is the fact that Trojan Vundo will install other malicious software and infections to the system, and make the system more vulnerable to future attacks.

If you find your PC is infected with this Trojan, you need to restore your system’s security and privacy by investing in a fully functional, operational and legitimate security application which will destroy Trojan Vundo for good. This will also protect the system against similar attacks in future, and leave you feeling confident that your system is being protected.

Download Remover for Trojan Vundo *
*SpyHunter scanner, published on this site, is intended to be used only as a detection tool. To use the removal functionality, you will need to purchase the full version of SpyHunter.

Trojan Vundo technical info for manual removal:

Files Modified/Created on the system:

# File Name File Size (Bytes) File Hash
1kokuluga.dll90624 bytesMD5: 1dd815fe1defce00251f4fb716f9af85
2jkklmmk.dll36864 bytes
3wibovaha.dll67072 bytes
4vuhugeya.dll91214 bytes
5doyanavo.dll, vijohato.dll, gojowahu.dll, reripaga.dll54272 bytesMD5: b2e3cdc530205b17c4567867fe9d8901
6farakive.dll64055 bytes
7awvvu.dll331776 bytes
8jkhfd.dll317024 bytes
9awtss.dll-removed_skip336992 bytes
10royetuki.dll93237 bytes
11madubiha.dll50176 bytes
12nezovefo.dll50176 bytes
13tareyezu.dll
14honayoto.dll92672 bytesMD5: 0e8b373b7c052bb69f3c288ff2b18d97
15hovogove.dll103219 bytes
16keradebu.dll50176 bytes
17urqnoli.dll38400 bytes
18dafumumu.dll93184 bytes
19nudeleze.dll96453 bytes
20ssttu.dll333408 bytes
21palozora.dll92160 bytesMD5: 4e23754facf297465261968fd5034582
22nzngrd.dll129024 bytes
23wotologa.dll92160 bytesMD5: 2f927060c15fcb48976e3e0057b03aca
24lumuheze.dll95396 bytes
25raziwanu.dll66560 bytes
26sefewana.dll92160 bytesMD5: 5709e3668c16f7ddaa3b9113e6f409d4
27veyevida.dll95941 bytes
28awvvt.dll344576 bytes
29yebineza.dll50176 bytes
30visoziyo.dll89088 bytesMD5: 318ac6c66a8f9d64e6cfa54c11c9b07d
31hesanebo.dll89088 bytesMD5: 287c41a48b9f4e16cccf4f64080481d4
32wvurpmn.dll37888 bytes
33foburune.dll86016 bytesMD5: bc1c4e7096118767175dec2a7fa05af7
34munokesu.dll91648 bytesMD5: 601224d3e6c5b92a26d69ea3647f1ac5
35geede.dll319072 bytes
36vufipuye.dll92672 bytesMD5: d830911d685c69cf68865c203ca76d96
37bugudesi.dll50176 bytes
38pmnllii.dll36352 bytes
39rahobofo.dll67072 bytes
40dogejuhu.dll89600 bytes
41guyubaha.dll39424 bytesMD5: bfcd4bc73f530c1e4ba1f7057e804e91
42fusigagi.dll45056 bytesMD5: 4363f5b582cdc9322ae9e8450438e53e
43testabd.dll24576 bytes
44vufurajo.dll92160 bytesMD5: 1e8dad487f1d4cbf2624ef66b522d3a1
45efccy.dll334848 bytes
46jkkjj.dll315488 bytes
47wefeyubi.dll, mudagodu.dll45056 bytesMD5: 1eca7b0e89097ad71d91738c4b2c9a86
48riborika.dll57344 bytesMD5: 2ddc88ca710a0f8743f900be4ed3e348
49zikewapo.dll92160 bytesMD5: cd89100f2172c3badca2792977453934
50gitoribo.dll91933 bytes
51yejimoya.dll91648 bytesMD5: 2f9c8912767536f8c945b9a66834c010
52petolahu.dll105984 bytes
53kedawubo.dll89088 bytesMD5: a73240a29d414c6c79e85340998f9b54
54sedutodo.dll66246 bytes
55pakiguwu.dll88576 bytes
56ramobugu.dll93184 bytesMD5: cbcc49be418671d24708f57da6565dce
57mofohupu.dll50688 bytes
58pmkjg.dll329312 bytes
59harupeza.dll89600 bytesMD5: 87d4d88ee7866c339c286358daf411fd
60tarozahi.dll93184 bytesMD5: c724d3f69378fa8635eae2a418183042
61rejipupo.dll50688 bytes
62kepenowe.dll39424 bytesMD5: 95b2a8c20ad2641dffab352b8c14fa07
63urqqrqo.dll41984 bytes
64khfdecc.dll40448 bytes
65naluwota.dll95879 bytes
66kuzogago.dll63755 bytes
67de6z7w05.exe122880 bytesMD5: b83115b560bfd3f10859df478160a1cf
68yohajizi.dll91432 bytes
69__c007CFDF.dat34816 bytesMD5: 9be2b2412e653b3969a988c8d4a44087
70zapohugu.dll
71__c0095022.dat28672 bytesMD5: cdb8fb85a648b1f126009e1edef8d797
72fubatuzo.dll91136 bytes
73yewiluyo.dll108032 bytes
74batujuko.dll89088 bytesMD5: 480227d8cf9108a366d8cae209a9991a
75vegapaye.dll39424 bytesMD5: 242d6b31daf6e1ad4f55a34719a25edb
76tidahahi.dll45056 bytesMD5: 4e9fd2478841d314298af7f979f20ddc
77qopoo.dll296448 bytes
78gebcyxx.dll38912 bytes
79wudepuve.dll88576 bytes
80bidubiti.dll92423 bytes
81luyusowa.dll92672 bytesMD5: 36c86ded46886fb81a61be96eb36adb3
82wobowedi.dll88576 bytes
83lutazipu.dll92672 bytes
84vakemuna.dll50176 bytes
85vtuvv.dll334848 bytes
86yujetata.dll89600 bytesMD5: 8ed52c18f957d3f4acb4ae43300a4fb0
87ddaby.dll333824 bytes
88vadusufo.dll89600 bytesMD5: a63b53c597862776dd9d24aca5f1b599
89kabujupe.dll103033 bytes
90mljijij.dll39936 bytes
91damopore.dll89600 bytes
92urqnlmm.dll40448 bytes
93setunude.dll49152 bytes
94emqsys.dll20992 bytes
95maweyeri.dll93696 bytes
96yatewefa.dll67072 bytes
97sstuu.dll316000 bytes
98zifewiba.dll50176 bytes
99_A00F1905D2A.exe37888 bytesMD5: 19a144e7cb3d048a06a5865a055c0981
100lusumune.dll91648 bytesMD5: 09c80985ec77b4ef6ac8df895ac7545b
101ddaaya.dll122880 bytesMD5: 056e217a68c3facce9fbb7bd3dd8b315
102patadosu.dll92672 bytesMD5: bf507f709922a4b384dcf7205d2d6531
103geedb.dll321632 bytes
104ganafihe.dll67072 bytes
105fubulave.dll92672 bytesMD5: 84f7cf1ff7ef65246ba87f0774b1b31e
106xanwtyxc.exe40448 bytesMD5: 98f2183ef91f091bb83bb1204dc166dc
107drnpfdxkvw.dll221184 bytes
108tihaduza.dll89600 bytesMD5: 30147d3b5ee43c00394e213fa994b460
109hhhhae.dll133120 bytes
110sifajade.dll91648 bytesMD5: d4e0b851900df3c68c80bcea6544ee2e
111ddcdbab.dll38912 bytes
112kunobesi.dll92672 bytesMD5: ca23aa840acc2ebf648154243283ebe3
113fabireze.dll97792 bytes
114kuvusabu.dll89600 bytesMD5: 47ebbec1be4e4b01c83c1bf491fc93d5
115mebarepo.dll87552 bytes
116websrc32.dll240128 bytes
117wumomara.dll92672 bytesMD5: d4966375044f6743824371e68356c0df
118vtutqpp.dll38400 bytes
119uvfsffms.dll94720 bytesMD5: 54eae8184df23ff8b7b95d3f09ef8c4a
120awtqo.dll320096 bytes
121wezetugu.dll92160 bytesMD5: e7f764ab3065d48aa9b68625358c5a98
122zivahesu.dll49152 bytes
123lotakine.dll79872 bytes
124nuvameje.dll108032 bytes
125hggghec.dll36864 bytes
126vtutr.dll321024 bytes
127fccbcab.dll36352 bytes
128ssqrp.dll293376 bytes
129fccddeb.dll39936 bytes
130fozojati.dll92672 bytesMD5: 9c658d81ee6cab99b0803e4b008eecf1
131sidebar32.exe113792 bytesMD5: c358e170f8c6525dbbc3bcf164eb9d40
132khfghgd.dll40448 bytes
133abypofwh.dll110592 bytes
134mljigde.dll41984 bytes
135yuwegiju.dll93184 bytesMD5: 2379eb878847d8cdb00270332e723395
136toretewo.dll51200 bytesMD5: d37145240bc750be8c491a18ca9637c4
137__c007010D.dat27648 bytesMD5: 6993623685ef2be15656a4d09a3b580b
138borababu.dll50176 bytes
139sewepedo.dll93915 bytes
140vtutq.dll329216 bytes
141updatecheck.exe90112 bytesMD5: 118d7d4133c84523bc35a863e51d5566
142arnobs.dll124416 bytes
143winwil32.dll24576 bytes
144pamuyomi.dll97876 bytes
145mmcprf.dll488960 bytesMD5: bdaa0397521746b794f62b6e7804c7f3
146norupeze.dll98900 bytes
147zimuworo.dll96043 bytes
148konowahu.dll90112 bytesMD5: 7e20e50ac1220789cb075817b914eee0
149roruhore.dll88576 bytes
150jkhfg.dll344576 bytes
151bokiluve.dll49664 bytes
152cbxwwwx.dll39424 bytes
153knpcoq.dll99840 bytes
154besigaza.dll102034 bytes
155kozezupo.dll94271 bytes
156tuvstqo.dll41472 bytes
157__c00D63A.dat25600 bytesMD5: aa98addfce1715b2f6b7ff2cd0a40b64
158weredaho.dll49152 bytes
159mibevilo.dll67072 bytes
160fhletmxb.dll165472 bytes
161madipoha.dll50688 bytes
162luravufa.dll67072 bytes
163__c0049D04.dat35328 bytesMD5: a091d71a79fed97b5eb6ab5a637cdfe0
164jimekaju.dll92672 bytesMD5: acbc13181f221383fcf142e1e8ed5d56
165yujukaku.dll89600 bytesMD5: 3ada9432c88a6761d54ea97885ca2b49
166duleneja.dll89600 bytesMD5: c73ebf54b88e5d547e2a1c6f8f403f00
167iifdeby.dll41472 bytes
168guderasa.dll98043 bytesMD5: b38d0b1a9ab73bf6a86d9160e6c2e4a4
169hupetetu.dll107520 bytes
170vtsqo.dll334848 bytes
171ddcyy.dll325184 bytes
172tiyunike.dll92672 bytesMD5: e60ac79ac42057190a5e8810d35b898f
173forukabe.dll91303 bytes
174ssttt.dll331776 bytes
175tmp2E.tmp.dll64512 bytes
176awvtr.dll344576 bytes
177_A00F13EF60D.exe37376 bytesMD5: 132c04f16e429035905b243944421351
178bajibuli.dll47616 bytes
179yayxwtt.dll36352 bytes
180tesggpg.dll104960 bytesMD5: 48324a445ec5c48d6ef699a199fb9bb8
181yinazeku.dll45056 bytesMD5: 321fbd327f661fdc77e547dde26a8ca5
182pmkhi.dll244832 bytes
183vtuuu.dll326752 bytes
184cbxyaaa.dll34816 bytes
185yozuyosa.dll92672 bytesMD5: 0e01c507e26da75a0ad5fcfe8d1f9e7a
186hgfeca.dll108032 bytesMD5: cf17205f23a88fb58fc805475bfdc533
187mezinoma.dll49664 bytes
188khfdc.dll330848 bytes
189kjdsrngn.exe57371 bytes
190ssqrq.dll320096 bytes
191yiyasafo.dll92672 bytesMD5: 5330d5fdc2fc6c6439acac5a78453c56
192loyayono.dll96768 bytesMD5: 4b3c7b37bfe500fd374d48886fee9c74
193hggdaxy.dll35328 bytes
194vturq.dll334848 bytes
195tupabezu.dll92160 bytesMD5: fb82cdc6f70adddc91ab6cd188f8e0de
196kahasuha.dll88064 bytes
197gebcy.dll334848 bytes
198zafedeho.dll92160 bytes
199cbxuust.dll36352 bytes
200zevafubi.dll92258 bytes
201vtusppn.dll37376 bytes
202filoloye.dll93184 bytesMD5: 109ca5c6851e148c6342b2b0230d6e4d
203nasijuye.dll96256 bytesMD5: 0eee3356df22a461239638218eaf45c7
204hemetepe.dll86016 bytes
205kugnlc.dll129024 bytes
206revalatu.dll45056 bytesMD5: 8ecaee696dac6a0a0e73e3f0cc1cd95f
207jutizowi.dll70710 bytes
208nagomone.dll48128 bytes
209_A00F158B740.exe40960 bytesMD5: 5ad9d2b6468ef813c68eea4caf87fca1
210xxwwv.dll321632 bytes
211ssqpm.dll335872 bytes
212_A00F98253.exe40448 bytesMD5: 5164db2e93e064a8eacfbe61251a4667
213ssqqrsq.dll23728 bytes
214seyiyetu.dll176640 bytesMD5: e6626c9103ebbc3f352b02bba2886a5a
215dipoveya.dll90624 bytesMD5: 0d51a585d150a9a008514478e14ba648
216awtutuv.dll38400 bytes
217mepavuhi.dll60928 bytesMD5: 7e05dc764d5d5a77525dffcac1350909
218gopuvuja.dll47616 bytes
219urqom.dll319584 bytes
220zywmdime.dll659472 bytes
221rqrqpmj.dll37888 bytes
222ljjkkii.dll31254 bytes
223ripodefe.dll50176 bytes
224cbxvuts.dll35328 bytes
225ragehage.dll104960 bytes
226tukuhegu.dll97474 bytes
227jkhhh.dll320608 bytes
228kihugali.dll93696 bytesMD5: 452d857312504ca57efb63a765e603f5
229gebyy.dll325184 bytes
230kutihfgl.dll73216 bytes
231fccbyww.dll40448 bytes
232pmnnmll.dll23728 bytes
233sizulase.dll50176 bytes
234ziyewila.dll94262 bytes
235kefuzego.dll88064 bytes
236kadageko.dll80384 bytes
237_A00F29699F.exe37888 bytesMD5: 6b1f4fb700d752c39bc1b3b333008d4e
238kawenola.dll67072 bytes
239%TEMP%
240rqrsqnm.dll39936 bytes
241mohasobi.dll97932 bytes
242komabagi.dll106496 bytes
243jijeruwa.dll92672 bytesMD5: 35c95b21f023ec9201cf9465cfb5d77d
244qommnno.dll39424 bytes
245__c00E00C0.dat35328 bytesMD5: 46cf62c92900f84d3b78f6f09ecc8941
246mozuzolo.dll93184 bytesMD5: 5317eb6a92bb86250927fa9a7d4fa44a
247awvtt.dll291840 bytes
248lekefoji.dll105472 bytes
249dapatudi.dll92672 bytesMD5: 5fe529765fd145798d6e502bd745ce64
250wadavuro.dll91648 bytesMD5: c14ccb470e1b60a293edc485d041dd32
251fopijunu.dll88576 bytes
252qommkjh.dll34816 bytes
253sstqp.dll290816 bytes
254qomklml.dll35328 bytes
255yoduvofa.dll, kozibala.dll39424 bytesMD5: 4c5a96706076890d0a51a7cccbfb81ef
256hajiruno.dll68096 bytes
257yobuwiji.dll81920 bytes
258gaduvoma.dll90624 bytesMD5: cd0ad490e946a2a0cff372778eb08afd
259%SystemRoot%\System32
260ruyutave.dll92672 bytesMD5: 60114baf5f8d5d970c259ac5b236a754
261__c0091CDF.dat28672 bytesMD5: 90982bb8ed61ebaddb39d42b76d0afde
262raritazu.dll95232 bytesMD5: 40293a3b006ad0aa65d7f2295a4d8b5e
263gebaaay.dll39424 bytes
264khfee.dll290816 bytes
265rikojine.dll92964 bytes
266qomnnop.dll38400 bytes
267mlljk.dll323168 bytes
268linobeyo.dll52736 bytesMD5: bc0d2c6fc5288e93d6cd2e9eda34cb3b
269yetujigi.dll52736 bytesMD5: 62718155ade1f7365281ddb74dc9f2c4
270zikedama.dll47616 bytes
271fccayaw.dll38400 bytes
272goralaro.dll50176 bytes
273dadirova.dll67072 bytes
274awturrq.dll40448 bytes
275__c00DFB62.dat25600 bytesMD5: 31a90a8e415a92c1ecbaf92cbafdf730
276sohovaha.dll
277gvzleg5r.exe157184 bytesMD5: 81b6ec76b0b313b04d0c576333ab3e4a
278hafasego.dll62076 bytes
279hgddc.dll313440 bytes
280pmkhh.dll331776 bytes
281nunayeta.dll95318 bytes
282viyezoya.dll61030 bytes
283__c0051750.dat28672 bytesMD5: 889c38b9d897754f0660fe901dea2f35
284vupisizi.dll91136 bytesMD5: ddccadea3deac0ba7ee371f995f5ae05
285zasulege.dll49152 bytes
286femigegi.dll92672 bytesMD5: fc6009ff27b53ee3fe8ad41cd2c19b0e
287foroheka.dll52736 bytesMD5: f1e3d308dd8c971b6648220b4a7fa8fe
288pofegohu.dll49664 bytes
289pmnnn.dll334848 bytes
290ledamine.dll106496 bytes
291sokazoya.dll39424 bytesMD5: 069346fd7d1a904ae9d9d8f834389e5f
292zefumiwu.dll97993 bytes
293herugife.dll93236 bytes
294vturpn.dll88576 bytesMD5: 08cfd69d98151b107b2c8ce6b485c896
295muzurimo.dll96433 bytes
296bodalene.dll96987 bytesMD5: e1a0d426ffa39f6fda679ebb9235d847
297nldfmtapxvt.dll217088 bytes
298tazamuto.dll98304 bytes
299dubolaho.dll92160 bytesMD5: ac7d0fc910450ffa0918b724de117e7f

Registry Modifications:

The following Registry Keys were created:

  • mndsregp.exe
  • AVPSrv
  • {57-72-28-83-ZN}
  • mppds
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {C16CDB5C-2468-4116-AD60-868CA1368FA1}
  • {ZN}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {BE0FF150-C7FC-4E37-8F92-4E9AF1389238}
  • mjdsregs.exe
  • rkqq
  • Software\Microsoft\Internet Explorer\URLSearchHooks {B6C621ED-821B-4311-4EF1-ACA0C115E707}
  • cygdwrso.dll
  • ybkjufcz
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {A14FB995-D8AC-494B-A6D3-ADC04028F281}
  • epmbkfcz
  • Bat Wave Base Dale
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {06EEE729-30EC-4480-A5D2-89BB99A618FA}
  • lolgrmra.exe
  • MsIMMs32
  • TISKY009.exe
  • {09-93-30-07-ZN}
  • abypofwh
  • {AC-CA-A5-5A-ZN}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {92a44a16-c56a-4506-b5cd-6fe05bdbe182}
  • Microsoft Windows Adapter 5.1.3214
  • Sen
  • diclwdyA
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {4910234A-B457-4278-90D2-0CE778675E25}
  • tejetun
  • pfrnnzxA
  • {B1-1B-B5-58-ZN}
  • j9221031.dll
  • sgohslhh
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {FE84C866-4F86-446D-8AFB-1438164EC1F9}
  • rkqqm.exe
  • {D6-6B-BA-A5-ZN}
  • uzvdfo
  • j7251636.dll
  • SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad SSODL
  • Qgh
  • mjdsregl.exe
  • tmp5B.tmp.exe
  • software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {1C72F7D4-A286-4B60-BDAD-438982FBB771}
  • Microsoft\Windows NT\CurrentVersion\Winlogon\Notify yayvtsp
  • ApachInc
  • msdsregm.exe
  • bwtwhehq.exe
  • {FC-CD-D6-62-ZN}
  • Dklvf
  • buvwfklw
  • {B5-54-43-3D-ZN}
  • {62-24-47-7E-ZN}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {76CFB752-E1B5-45E5-871F-E696B997FFB1}
  • Microsft Windows Adapter 5.1.3013
  • Uninstall_CToolbar
  • AVPSrv.exe
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}
  • {9B-B6-64-4C-ZN}
  • zzb
  • {74-49-9C-CD-ZN}
  • {FA-AA-A9-90-ZN}
  • mevega
  • modsregn.exe
  • Microsft Windows Adapter
  • mppds.exe
  • 6B95DB4F
  • {A0-08-87-75-ZN}
  • {33-38-81-17-ZN}
  • Tapicfg.exe
  • j0221833
  • fwfu
  • {32-2B-B3-32-ZN}
  • MemoryManager
  • ownsuser
  • MSOffice
  • Kvsc3.exe
  • {26-60-05-56-ZN}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {1CF662BF-4AFD-4778-8306-1F0EB8284EBB}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {48F2A76C-BCC4-4D15-97AC-2C78BC84CB45}
  • rs2R3ph
  • Roogpcg
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {8E1BFC0E-8AD2-424D-AC8A-06038481516E}
  • j7251636
  • winshow
  • SearchIndexer
  • PrintDrive
  • {63-31-1E-E8-ZN}
  • Xri
  • {17-79-92-28-ZN}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {C7BBDD18-4BD1-416D-877A-4EDB566A0054}
  • MsIMMs32.exe
  • {E5-56-67-7A-ZN}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad mgsvflkw
  • dwdsregt.exe
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {F1C5B241-BFBE-4CFC-99A4-76823ADF23F6}
  • {B9-92-26-69-ZN}
  • msccrt
  • horymywe
  • j9221031
  • abypofwh.dll
  • mlwfltyj.dll
  • Kvsc3

Reply

Your email address will not be published.

Name
Website
Comment

Enter the numbers in the box to the right *