Trojan Vundo Removal Guide

Threat Level:
9/10
Rate this Article:
Comments (0)
Article Views: 25700
Category: Trojans

There are simply too many threats facing healthy PCs these days to go at protecting your PC alone – and Trojan Vundo is the perfect example. This vicious and malicious Trojan enters the system surreptitiously and roots itself in the system without seeking action or permission from the user.

The entire purpose behind Trojan Vundo is to spam the user with various annoying commercial pop up ads, as well as to download more malware onto the system without the user even knowing about it. Other annoying symptoms associated with Trojan Vundo include slowing down the infected PC to the point of being nearly completely unmanageable, and it will increase erratic system behavior.

This Trojan is spread via a variety of ways, which includes through infected e-mail attachments and through social networking applications. What adds to the danger is the fact that Trojan Vundo will install other malicious software and infections to the system, and make the system more vulnerable to future attacks.

If you find your PC is infected with this Trojan, you need to restore your system’s security and privacy by investing in a fully functional, operational and legitimate security application which will destroy Trojan Vundo for good. This will also protect the system against similar attacks in future, and leave you feeling confident that your system is being protected.

Download Remover for Trojan Vundo *
*SpyHunter scanner, published on this site, is intended to be used only as a detection tool. To use the removal functionality, you will need to purchase the full version of SpyHunter.

Trojan Vundo technical info for manual removal:

Files Modified/Created on the system:

# File Name File Size (Bytes) File Hash
1tazamuto.dll98304 bytes
2batujuko.dll89088 bytesMD5: 480227d8cf9108a366d8cae209a9991a
3ssqpm.dll335872 bytes
4ssttu.dll333408 bytes
5visoziyo.dll89088 bytesMD5: 318ac6c66a8f9d64e6cfa54c11c9b07d
6__c0095022.dat28672 bytesMD5: cdb8fb85a648b1f126009e1edef8d797
7jimekaju.dll92672 bytesMD5: acbc13181f221383fcf142e1e8ed5d56
8__c007010D.dat27648 bytesMD5: 6993623685ef2be15656a4d09a3b580b
9pmkhh.dll331776 bytes
10pakiguwu.dll88576 bytes
11emqsys.dll20992 bytes
12yoduvofa.dll, kozibala.dll39424 bytesMD5: 4c5a96706076890d0a51a7cccbfb81ef
13awvtr.dll344576 bytes
14zywmdime.dll659472 bytes
15nuvameje.dll108032 bytes
16gopuvuja.dll47616 bytes
17ragehage.dll104960 bytes
18dogejuhu.dll89600 bytes
19nldfmtapxvt.dll217088 bytes
20wobowedi.dll88576 bytes
21awvtt.dll291840 bytes
22bokiluve.dll49664 bytes
23vtutq.dll329216 bytes
24xanwtyxc.exe40448 bytesMD5: 98f2183ef91f091bb83bb1204dc166dc
25mohasobi.dll97932 bytes
26bidubiti.dll92423 bytes
27kjdsrngn.exe57371 bytes
28urqnlmm.dll40448 bytes
29fccddeb.dll39936 bytes
30zapohugu.dll
31besigaza.dll102034 bytes
32qomnnop.dll38400 bytes
33geede.dll319072 bytes
34vegapaye.dll39424 bytesMD5: 242d6b31daf6e1ad4f55a34719a25edb
35_A00F158B740.exe40960 bytesMD5: 5ad9d2b6468ef813c68eea4caf87fca1
36wadavuro.dll91648 bytesMD5: c14ccb470e1b60a293edc485d041dd32
37%TEMP%
38fozojati.dll92672 bytesMD5: 9c658d81ee6cab99b0803e4b008eecf1
39zimuworo.dll96043 bytes
40ddaaya.dll122880 bytesMD5: 056e217a68c3facce9fbb7bd3dd8b315
41wibovaha.dll67072 bytes
42vturpn.dll88576 bytesMD5: 08cfd69d98151b107b2c8ce6b485c896
43mljijij.dll39936 bytes
44konowahu.dll90112 bytesMD5: 7e20e50ac1220789cb075817b914eee0
45awvvu.dll331776 bytes
46royetuki.dll93237 bytes
47vtuuu.dll326752 bytes
48dafumumu.dll93184 bytes
49linobeyo.dll52736 bytesMD5: bc0d2c6fc5288e93d6cd2e9eda34cb3b
50guyubaha.dll39424 bytesMD5: bfcd4bc73f530c1e4ba1f7057e804e91
51_A00F98253.exe40448 bytesMD5: 5164db2e93e064a8eacfbe61251a4667
52zikewapo.dll92160 bytesMD5: cd89100f2172c3badca2792977453934
53fccbyww.dll40448 bytes
54mljigde.dll41984 bytes
55sefewana.dll92160 bytesMD5: 5709e3668c16f7ddaa3b9113e6f409d4
56vuhugeya.dll91214 bytes
57ripodefe.dll50176 bytes
58borababu.dll50176 bytes
59yujetata.dll89600 bytesMD5: 8ed52c18f957d3f4acb4ae43300a4fb0
60qopoo.dll296448 bytes
61petolahu.dll105984 bytes
62harupeza.dll89600 bytesMD5: 87d4d88ee7866c339c286358daf411fd
63nezovefo.dll50176 bytes
64dadirova.dll67072 bytes
65foburune.dll86016 bytesMD5: bc1c4e7096118767175dec2a7fa05af7
66kihugali.dll93696 bytesMD5: 452d857312504ca57efb63a765e603f5
67wvuvstr.dll35840 bytes
68norupeze.dll98900 bytes
69yinazeku.dll45056 bytesMD5: 321fbd327f661fdc77e547dde26a8ca5
70vtusppn.dll37376 bytes
71kawenola.dll67072 bytes
72lumuheze.dll95396 bytes
73khfdecc.dll40448 bytes
74arnobs.dll124416 bytes
75nzngrd.dll129024 bytes
76rqrsqnm.dll39936 bytes
77pofegohu.dll49664 bytes
78%SystemRoot%\System32
79hupetetu.dll107520 bytes
80damopore.dll89600 bytes
81abypofwh.dll110592 bytes
82jkhfd.dll317024 bytes
83vupisizi.dll91136 bytesMD5: ddccadea3deac0ba7ee371f995f5ae05
84wumomara.dll92672 bytesMD5: d4966375044f6743824371e68356c0df
85wvurpmn.dll37888 bytes
86sohovaha.dll
87uvfsffms.dll94720 bytesMD5: 54eae8184df23ff8b7b95d3f09ef8c4a
88gebaaay.dll39424 bytes
89jijeruwa.dll92672 bytesMD5: 35c95b21f023ec9201cf9465cfb5d77d
90sstqp.dll290816 bytes
91toretewo.dll51200 bytesMD5: d37145240bc750be8c491a18ca9637c4
92mezinoma.dll49664 bytes
93rqrqpmj.dll37888 bytes
94nudeleze.dll96453 bytes
95testabd.dll24576 bytes
96__c0051750.dat28672 bytesMD5: 889c38b9d897754f0660fe901dea2f35
97sokazoya.dll39424 bytesMD5: 069346fd7d1a904ae9d9d8f834389e5f
98awtutuv.dll38400 bytes
99yejimoya.dll91648 bytesMD5: 2f9c8912767536f8c945b9a66834c010
100khfee.dll290816 bytes
101tiyunike.dll92672 bytesMD5: e60ac79ac42057190a5e8810d35b898f
102yiyasafo.dll92672 bytesMD5: 5330d5fdc2fc6c6439acac5a78453c56
103patadosu.dll92672 bytesMD5: bf507f709922a4b384dcf7205d2d6531
104lotakine.dll79872 bytes
105kadageko.dll80384 bytes
106ssqrp.dll293376 bytes
107sifajade.dll91648 bytesMD5: d4e0b851900df3c68c80bcea6544ee2e
108yuwegiju.dll93184 bytesMD5: 2379eb878847d8cdb00270332e723395
109muzurimo.dll96433 bytes
110urqnoli.dll38400 bytes
111mibevilo.dll67072 bytes
112seyiyetu.dll176640 bytesMD5: e6626c9103ebbc3f352b02bba2886a5a
113fusigagi.dll45056 bytesMD5: 4363f5b582cdc9322ae9e8450438e53e
114ddcdbab.dll38912 bytes
115jkhhh.dll320608 bytes
116rahobofo.dll67072 bytes
117khfghgd.dll40448 bytes
118ganafihe.dll67072 bytes
119ruyutave.dll92672 bytesMD5: 60114baf5f8d5d970c259ac5b236a754
120vadusufo.dll89600 bytesMD5: a63b53c597862776dd9d24aca5f1b599
121_A00F1905D2A.exe37888 bytesMD5: 19a144e7cb3d048a06a5865a055c0981
122ddaby.dll333824 bytes
123jutizowi.dll70710 bytes
124__c0049D04.dat35328 bytesMD5: a091d71a79fed97b5eb6ab5a637cdfe0
125kokuluga.dll90624 bytesMD5: 1dd815fe1defce00251f4fb716f9af85
126awtss.dll-removed_skip336992 bytes
127mmcprf.dll488960 bytesMD5: bdaa0397521746b794f62b6e7804c7f3
128guderasa.dll98043 bytesMD5: b38d0b1a9ab73bf6a86d9160e6c2e4a4
129pamuyomi.dll97876 bytes
130nagomone.dll48128 bytes
131bajibuli.dll47616 bytes
132__c00D63A.dat25600 bytesMD5: aa98addfce1715b2f6b7ff2cd0a40b64
133lutazipu.dll92672 bytes
134maweyeri.dll93696 bytes
135kuvusabu.dll89600 bytesMD5: 47ebbec1be4e4b01c83c1bf491fc93d5
136herugife.dll93236 bytes
137__c0091CDF.dat28672 bytesMD5: 90982bb8ed61ebaddb39d42b76d0afde
138kepenowe.dll39424 bytesMD5: 95b2a8c20ad2641dffab352b8c14fa07
139cbxvuts.dll35328 bytes
140qommnno.dll39424 bytes
141kahasuha.dll88064 bytes
142raritazu.dll95232 bytesMD5: 40293a3b006ad0aa65d7f2295a4d8b5e
143nasijuye.dll96256 bytesMD5: 0eee3356df22a461239638218eaf45c7
144viyezoya.dll61030 bytes
145dapatudi.dll92672 bytesMD5: 5fe529765fd145798d6e502bd745ce64
146goralaro.dll50176 bytes
147foroheka.dll52736 bytesMD5: f1e3d308dd8c971b6648220b4a7fa8fe
148qommkjh.dll34816 bytes
149gvzleg5r.exe157184 bytesMD5: 81b6ec76b0b313b04d0c576333ab3e4a
150fccayaw.dll38400 bytes
151pmkhi.dll244832 bytes
152bugudesi.dll50176 bytes
153yujukaku.dll89600 bytesMD5: 3ada9432c88a6761d54ea97885ca2b49
154vturq.dll334848 bytes
155vtutr.dll321024 bytes
156zifewiba.dll50176 bytes
157kunobesi.dll92672 bytesMD5: ca23aa840acc2ebf648154243283ebe3
158drnpfdxkvw.dll221184 bytes
159hafasego.dll62076 bytes
160komabagi.dll106496 bytes
161gebcyxx.dll38912 bytes
162xxwwv.dll321632 bytes
163mozuzolo.dll93184 bytesMD5: 5317eb6a92bb86250927fa9a7d4fa44a
164yohajizi.dll91432 bytes
165vtutqpp.dll38400 bytes
166jkhfg.dll344576 bytes
167kuzogago.dll63755 bytes
168hajiruno.dll68096 bytes
169palozora.dll92160 bytesMD5: 4e23754facf297465261968fd5034582
170luyusowa.dll92672 bytesMD5: 36c86ded46886fb81a61be96eb36adb3
171wudepuve.dll88576 bytes
172fabireze.dll97792 bytes
173efccy.dll334848 bytes
174keradebu.dll50176 bytes
175urqom.dll319584 bytes
176iifdeby.dll41472 bytes
177__c00DFB62.dat25600 bytesMD5: 31a90a8e415a92c1ecbaf92cbafdf730
178kedawubo.dll89088 bytesMD5: a73240a29d414c6c79e85340998f9b54
179jkkjj.dll315488 bytes
180winwil32.dll24576 bytes
181ddcyy.dll325184 bytes
182fccbcab.dll36352 bytes
183gebyy.dll325184 bytes
184mofohupu.dll50688 bytes
185yatewefa.dll67072 bytes
186raziwanu.dll66560 bytes
187weredaho.dll49152 bytes
188ramobugu.dll93184 bytesMD5: cbcc49be418671d24708f57da6565dce
189hgfeca.dll108032 bytesMD5: cf17205f23a88fb58fc805475bfdc533
190nunayeta.dll95318 bytes
191rikojine.dll92964 bytes
192doyanavo.dll, vijohato.dll, gojowahu.dll, reripaga.dll54272 bytesMD5: b2e3cdc530205b17c4567867fe9d8901
193zivahesu.dll49152 bytes
194naluwota.dll95879 bytes
195roruhore.dll88576 bytes
196websrc32.dll240128 bytes
197_A00F29699F.exe37888 bytesMD5: 6b1f4fb700d752c39bc1b3b333008d4e
198farakive.dll64055 bytes
199wotologa.dll92160 bytesMD5: 2f927060c15fcb48976e3e0057b03aca
200ljjkkii.dll31254 bytes
201kozezupo.dll94271 bytes
202de6z7w05.exe122880 bytesMD5: b83115b560bfd3f10859df478160a1cf
203tidahahi.dll45056 bytesMD5: 4e9fd2478841d314298af7f979f20ddc
204fubatuzo.dll91136 bytes
205rejipupo.dll50688 bytes
206madubiha.dll50176 bytes
207awvvt.dll344576 bytes
208tuvstqo.dll41472 bytes
209kabujupe.dll103033 bytes
210madipoha.dll50688 bytes
211tesggpg.dll104960 bytesMD5: 48324a445ec5c48d6ef699a199fb9bb8
212luravufa.dll67072 bytes
213sizulase.dll50176 bytes
214yetujigi.dll52736 bytesMD5: 62718155ade1f7365281ddb74dc9f2c4
215geedb.dll321632 bytes
216zevafubi.dll92258 bytes
217kugnlc.dll129024 bytes
218gaduvoma.dll90624 bytesMD5: cd0ad490e946a2a0cff372778eb08afd
219sedutodo.dll66246 bytes
220veyevida.dll95941 bytes
221khfdc.dll330848 bytes
222pmkjg.dll329312 bytes
223duleneja.dll89600 bytesMD5: c73ebf54b88e5d547e2a1c6f8f403f00
224mebarepo.dll87552 bytes
225gitoribo.dll91933 bytes
226revalatu.dll45056 bytesMD5: 8ecaee696dac6a0a0e73e3f0cc1cd95f
227bodalene.dll96987 bytesMD5: e1a0d426ffa39f6fda679ebb9235d847
228updatecheck.exe90112 bytesMD5: 118d7d4133c84523bc35a863e51d5566
229hhhhae.dll133120 bytes
230munokesu.dll91648 bytesMD5: 601224d3e6c5b92a26d69ea3647f1ac5
231pmnnmll.dll23728 bytes
232pmnllii.dll36352 bytes
233cbxuust.dll36352 bytes
234sewepedo.dll93915 bytes
235yobuwiji.dll81920 bytes
236tareyezu.dll
237wezetugu.dll92160 bytesMD5: e7f764ab3065d48aa9b68625358c5a98
238mlljk.dll323168 bytes
239ssttt.dll331776 bytes
240fopijunu.dll88576 bytes
241sidebar32.exe113792 bytesMD5: c358e170f8c6525dbbc3bcf164eb9d40
242lusumune.dll91648 bytesMD5: 09c80985ec77b4ef6ac8df895ac7545b
243vakemuna.dll50176 bytes
244hgddc.dll313440 bytes
245hggghec.dll36864 bytes
246awturrq.dll40448 bytes
247_A00F13EF60D.exe37376 bytesMD5: 132c04f16e429035905b243944421351
248fubulave.dll92672 bytesMD5: 84f7cf1ff7ef65246ba87f0774b1b31e
249vufurajo.dll92160 bytesMD5: 1e8dad487f1d4cbf2624ef66b522d3a1
250hovogove.dll103219 bytes
251femigegi.dll92672 bytesMD5: fc6009ff27b53ee3fe8ad41cd2c19b0e
252honayoto.dll92672 bytesMD5: 0e8b373b7c052bb69f3c288ff2b18d97
253vtsqo.dll334848 bytes
254filoloye.dll93184 bytesMD5: 109ca5c6851e148c6342b2b0230d6e4d
255hggdaxy.dll35328 bytes
256sstuu.dll316000 bytes
257setunude.dll49152 bytes
258__c00E00C0.dat35328 bytesMD5: 46cf62c92900f84d3b78f6f09ecc8941
259wefeyubi.dll, mudagodu.dll45056 bytesMD5: 1eca7b0e89097ad71d91738c4b2c9a86
260hemetepe.dll86016 bytes
261tarozahi.dll93184 bytesMD5: c724d3f69378fa8635eae2a418183042
262yozuyosa.dll92672 bytesMD5: 0e01c507e26da75a0ad5fcfe8d1f9e7a
263hesanebo.dll89088 bytesMD5: 287c41a48b9f4e16cccf4f64080481d4
264kutihfgl.dll73216 bytes
265yebineza.dll50176 bytes
266urqqrqo.dll41984 bytes
267zefumiwu.dll97993 bytes
268forukabe.dll91303 bytes
269cbxwwwx.dll39424 bytes
270jkklmmk.dll36864 bytes
271cbxyaaa.dll34816 bytes
272fhletmxb.dll165472 bytes
273pmnnn.dll334848 bytes
274tmp2E.tmp.dll64512 bytes
275ssqrq.dll320096 bytes
276riborika.dll57344 bytesMD5: 2ddc88ca710a0f8743f900be4ed3e348
277gebcy.dll334848 bytes
278ziyewila.dll94262 bytes
279tupabezu.dll92160 bytesMD5: fb82cdc6f70adddc91ab6cd188f8e0de
280__c007CFDF.dat34816 bytesMD5: 9be2b2412e653b3969a988c8d4a44087
281vufipuye.dll92672 bytesMD5: d830911d685c69cf68865c203ca76d96
282dipoveya.dll90624 bytesMD5: 0d51a585d150a9a008514478e14ba648
283lekefoji.dll105472 bytes
284ssqqrsq.dll23728 bytes
285kefuzego.dll88064 bytes
286knpcoq.dll99840 bytes
287mepavuhi.dll60928 bytesMD5: 7e05dc764d5d5a77525dffcac1350909
288yewiluyo.dll108032 bytes
289qomklml.dll35328 bytes
290tihaduza.dll89600 bytesMD5: 30147d3b5ee43c00394e213fa994b460
291tukuhegu.dll97474 bytes
292zafedeho.dll92160 bytes
293zikedama.dll47616 bytes
294ledamine.dll106496 bytes
295dubolaho.dll92160 bytesMD5: ac7d0fc910450ffa0918b724de117e7f
296awtqo.dll320096 bytes
297loyayono.dll96768 bytesMD5: 4b3c7b37bfe500fd374d48886fee9c74
298vtuvv.dll334848 bytes
299zasulege.dll49152 bytes

Registry Modifications:

The following Registry Keys were created:

  • {33-38-81-17-ZN}
  • {63-31-1E-E8-ZN}
  • ownsuser
  • horymywe
  • Tapicfg.exe
  • buvwfklw
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {BE0FF150-C7FC-4E37-8F92-4E9AF1389238}
  • Sen
  • rkqq
  • tmp5B.tmp.exe
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {8E1BFC0E-8AD2-424D-AC8A-06038481516E}
  • {26-60-05-56-ZN}
  • Kvsc3
  • MsIMMs32.exe
  • j7251636
  • Microsft Windows Adapter 5.1.3013
  • epmbkfcz
  • AVPSrv.exe
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {92a44a16-c56a-4506-b5cd-6fe05bdbe182}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {FE84C866-4F86-446D-8AFB-1438164EC1F9}
  • {B5-54-43-3D-ZN}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {1CF662BF-4AFD-4778-8306-1F0EB8284EBB}
  • lolgrmra.exe
  • {9B-B6-64-4C-ZN}
  • Software\Microsoft\Internet Explorer\URLSearchHooks {B6C621ED-821B-4311-4EF1-ACA0C115E707}
  • uzvdfo
  • software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {1C72F7D4-A286-4B60-BDAD-438982FBB771}
  • mppds.exe
  • modsregn.exe
  • bwtwhehq.exe
  • mppds
  • winshow
  • j7251636.dll
  • pfrnnzxA
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}
  • j9221031
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {F1C5B241-BFBE-4CFC-99A4-76823ADF23F6}
  • rs2R3ph
  • Microsft Windows Adapter
  • SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad mgsvflkw
  • j9221031.dll
  • AVPSrv
  • mjdsregl.exe
  • abypofwh
  • 6B95DB4F
  • msdsregm.exe
  • rkqqm.exe
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {C16CDB5C-2468-4116-AD60-868CA1368FA1}
  • zzb
  • {09-93-30-07-ZN}
  • Dklvf
  • {74-49-9C-CD-ZN}
  • {FA-AA-A9-90-ZN}
  • {A0-08-87-75-ZN}
  • {D6-6B-BA-A5-ZN}
  • {AC-CA-A5-5A-ZN}
  • {E5-56-67-7A-ZN}
  • MsIMMs32
  • Microsoft\Windows NT\CurrentVersion\Winlogon\Notify yayvtsp
  • tejetun
  • SearchIndexer
  • {FC-CD-D6-62-ZN}
  • {62-24-47-7E-ZN}
  • Xri
  • sgohslhh
  • Microsoft Windows Adapter 5.1.3214
  • {B9-92-26-69-ZN}
  • mlwfltyj.dll
  • Kvsc3.exe
  • j0221833
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {C7BBDD18-4BD1-416D-877A-4EDB566A0054}
  • Bat Wave Base Dale
  • ApachInc
  • MSOffice
  • msccrt
  • SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad SSODL
  • mevega
  • abypofwh.dll
  • {17-79-92-28-ZN}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {A14FB995-D8AC-494B-A6D3-ADC04028F281}
  • {B1-1B-B5-58-ZN}
  • PrintDrive
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {4910234A-B457-4278-90D2-0CE778675E25}
  • {ZN}
  • diclwdyA
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {48F2A76C-BCC4-4D15-97AC-2C78BC84CB45}
  • fwfu
  • Qgh
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {06EEE729-30EC-4480-A5D2-89BB99A618FA}
  • {32-2B-B3-32-ZN}
  • cygdwrso.dll
  • Uninstall_CToolbar
  • TISKY009.exe
  • {57-72-28-83-ZN}
  • mjdsregs.exe
  • Roogpcg
  • dwdsregt.exe
  • MemoryManager
  • mndsregp.exe
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {76CFB752-E1B5-45E5-871F-E696B997FFB1}
  • ybkjufcz

Reply

Your email address will not be published.

Name
Website
Comment

Enter the numbers in the box to the right *