Trojan:vbs/mutuodo.a Removal Guide

Trojan:vbs/mutuodo.a is closely associated with the application called PriceFountain, which is another adware program. Since it is mainly distributed via software bundles, some users do not even know that they have it installed on their computers. As a consequence, they know nothing about the presence of Trojan:vbs/mutuodo.a too. Most likely, you are not one of them, i.e. you have already detected it on your computer if you are reading this report. If it is the case, we highly recommend that you eliminate this threat from your system. It is still hard to say how it acts, but we are sure that the Trojan infection cannot bring anything good. Unfortunately, users usually find these threats installed on their computers when it is already too late, i.e. when they have already done the damage. In any case, the sooner you clean your system, the better. Since Trojan:vbs/mutuodo.a creates entries in the system registry, its removal might be a bit complicated, but you should still manage to erase this infection yourself if you use our instructions. Take all necessary action to disable this Trojan immediately after you read this report.

It seems that Trojan:vbs/mutuodo.a gets installed on users’ computers together with PriceFountain. This program is a typical advertising-supported application. That is, it is one of those programs that distribute commercial advertisements. You might not know anything about the presence of this adware program, but if you have started seeing pop-ups, banners, and other random advertisements no matter what websites you visit, you should check all installed applications. If PriceFountain is there, there is basically no doubt that Trojan:vbs/mutuodo.a is active on your computer. According to our experienced malware researchers, there is a possibility that it will modify users’ settings without their knowledge. Additionally, Trojan infections might be used to steal information from users’ computers and even install new malicious applications. Because of this, the sooner you erase Trojan:vbs/mutuodo.a, the better. It is quite a sophisticated malicious application – it modifies the system registry. As a consequence, it will continue working even if you restart your computer. Unfortunately, this also means that it will not be a piece of cake to remove it.

As you already know, there is a huge possibility that Trojan:vbs/mutuodo.a travels together with PriceFountain. Even though it is installed on users’ computers illegally, it does not mean that scanning the system with an antimalware scanner is the only way to detect it. There are several symptoms that can tell you about the presence of this Trojan. For example, if you can find PriceFountain and Rinapi entries in HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce, there is a huge possibility that you have encountered Trojan:vbs/mutuodo.a because it creates these two Values on the affected computer after the successful infiltration. We will help you to remove this threat this time, but it does not mean that you will be protected from other harmful infections. Crooks develop new threats every day – they might enter your computer illegally at any time. Luckily, there is a way to prevent harmful malware from entering the system without putting much effort into this – you need to have a security application enabled on your computer. You cannot install the first antimalware scanner found on the web. There are hundreds of tools that only pretend to be reliable scanners but, in reality, work as malware.

You need to remove Trojan:vbs/mutuodo.a from your system as soon as possible because it might bring you serious problems. As for the adware program PriceFountain, we recommend getting rid of it too because it will not stop showing advertisements. To delete the Trojan infection from your computer, you need to remove its entries from the system registry and, on top of that, remove malicious files. You can use our manual removal instructions if you decide to erase Trojan:vbs/mutuodo.a in a manual way, but you should know that all threats can be deleted automatically too. If you are a less experienced user or do not have time to erase the Trojan manually, it would be best that you adopt the latter method.

Remove Trojan:vbs/mutuodo.a

1. Launch Run (tap Win+R).
2. Type regedit in the command line and then press Enter.
3. Move to HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce.
4. Locate PriceFountain and Rinapi Values.
5. Delete both of them.
6. Close Registry Editor and open Explorer.
7. Go to %APPDATA%\PriceFountain\UpdateProc.
8. Remove bkup.dat and UpdateTask.exe.
9. Delete the Mogan folder from %APPDATA%.
10. Delete %LOCALAPPDATA%\{32 hexadecimal numbers}\synhelper.exe.
11. Empty Recycle Bin.
12. Scan your system with a diagnostic scanner.