How to Remove “Play.exe”

What is Play.exe?

Play.exe is a legitimate process file popularly known as Easy CD Creater API. It belongs to Easy CD Creator API, developed by Roxio. It is located in C:\Windows\System32 by default. Malware programmers write virus files with malicious scripts and save them as Play.exe with an intention to spread virus on the internet.

Affected Platforms: Windows OS

How to determine if your computer is infected with Play.exe malware?

Look out for these symptoms to check if your PC is infected with Play.exe malware:

  • Unstable internet connection
  • Play.exe occupies extra CPU space
  • PC processing speed slows down
  • Browser often redirects to irrelevant websites
  • Browser is bombarded with hordes of popup ads
  • Computer screen freezes repeatedly

Take the following steps to diagnose your PC for possible Play.exe malware attack:

Step 1: Simultaneously press CTRL+ALT+DEL keys to open Task Manager.

Step 2: If you notice the file located outside C:\Windows\System32, perform an antivirus scan to get rid of the malware.

How to remove Play.exe malware from system using Comodo Antivirus?

Step 1: Download our award-winning Free Antivirus

Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.

Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.

Step 4: Restart your PC after the installation gets over

Step 5: Wait for Comodo Internet Security to update the antivirus.

Step 6: Proceed with the quick scan that automatically begins after the update.

Step 7: If threats are found during the scanning, you will be notified through an alert screen.

Step 8: Comodo Antivirus will remove Play.exe malware from your computer including all other malwares!

6

Malware Entries

First Seen: 16 April 2009 at 11:03 am
No. Company File Type SHA1 MD5 Malware
Name
Digitally
Signed
File
Version
Product
Version
Submitted
From
Malware Behavior
1 Official AutoPatcher Of Server . Executable fcd0332008ce7114
cad0a609d04b40ef
dee260ad
5a29680d6a9a2c85
8cf850351cc4af90
Virus.Win32.
Ramnit.A
No 1.1.0.5 1.0.0.0 United States N/A
2 JimPossible Executable 1b7de3b95f945611
adcac6fbfa363c3a
488817c3
56470d80eea7bfff
7af93d0e5b9ebf02
Unclassified
Malware
No 1.0.0.0 1.0.0.0 United States N/A
3 N/A Executable 0c7a7489cbe9d57c
903d5afb5a43ddc8
b3ad461f
e464c137fc852bca
14faf62323b7e2f8
TrojWare.MSI
L.Bladabindi
.KX
No N/A N/A United States N/A
4 N/A Executable 2e489d7a66c865c6
c33a8181277ab67d
63fe537d
eb3aa6606217cec4
c23500c58170b5e9
Unclassified
Malware
No 1.0.0.0 1.0.0.0 United States N/A
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
29

Safe Entries

First Seen: 24 January 2009 at 6:09 am
No. Company File Type SHA1 MD5 Digitally
Signed
File
Version
Product
Version
Submitted
From
1 N/A Executable d67d8a5b4d53c5bd
1353df1dbc40ef36
f023254c
390d77096407abdb
34e5543b83ee44f7
No N/A N/A United States
2 酷播影视科技 Executable d051bd46014c413e
b2844dda42bf66f7
43702598
b6ec6e37b5b3a0c8
4e86d204410f758d
No 1.00 1.00 China
3 play Executable 5e280df88084b640
ff7dce19d506dffd
f4b95f15
c58d5db04364ecd6
5a15f2dffd08e93f
No 2.0.0.0 2.0.0.0 198.20.167.84/32
4 N/A Executable cec99a3aab856eb5
14ebb1b7e49d9905
6d3ac5f4
4213347110066f4a
86a5fd632414f1a7
No N/A N/A United States
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
 
Exclusive Offer
Get Free Endpoint Protection
Get Advanced
Endpoint
Protection

Award-Winning Security to Protect Your Clients from Cyber Attacks

Comodo Internet Security Pro

Free Antivirus protection from hackers! Get the ultimate Antivirus solution to keep your PC clean and to remove viruses from a slow or infected PC. Improve the PC performance at home or use it on-the-go!

Get Comodo Internet Security Comodo Internet Security