How to Remove “Play.exe”

What is Play.exe?

Play.exe is a legitimate process file popularly known as Easy CD Creater API. It belongs to Easy CD Creator API, developed by Roxio. It is located in C:\Windows\System32 by default. Malware programmers write virus files with malicious scripts and save them as Play.exe with an intention to spread virus on the internet.

Affected Platforms: Windows OS

How to determine if your computer is infected with Play.exe malware?

Look out for these symptoms to check if your PC is infected with Play.exe malware:

  • Unstable internet connection
  • Play.exe occupies extra CPU space
  • PC processing speed slows down
  • Browser often redirects to irrelevant websites
  • Browser is bombarded with hordes of popup ads
  • Computer screen freezes repeatedly

Take the following steps to diagnose your PC for possible Play.exe malware attack:

Step 1: Simultaneously press CTRL+ALT+DEL keys to open Task Manager.

Step 2: If you notice the file located outside C:\Windows\System32, perform an antivirus scan to get rid of the malware.

How to remove Play.exe malware from system using Comodo Antivirus?

Step 1: Download our award-winning Free Antivirus

Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.

Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.

Step 4: Restart your PC after the installation gets over

Step 5: Wait for Comodo Internet Security to update the antivirus.

Step 6: Proceed with the quick scan that automatically begins after the update.

Step 7: If threats are found during the scanning, you will be notified through an alert screen.

Step 8: Comodo Antivirus will remove Play.exe malware from your computer including all other malwares!

7

Malware Entries

First Seen: 08 February 2009 at 3:08 am
No. Company File Type SHA1 MD5 Malware
Name
Digitally
Signed
File
Version
Product
Version
Submitted
From
Malware Behavior
1 N/A Executable bba5dd299b1b13f2
22dee6493ed00d19
19fb6d32
84bb81b8183ba10d
976906a03f4db7c2
TrojWare.MSI
L.PSW.Agent.
oxf
No 3.20.0.17 3.20.0.17 China N/A
2 BKHN Executable ec7aebc9e7379530
770d0d6d5fa3ede5
f6353062
b81ed9492362dcc4
ec4b62e400347d99
TrojWare.Win
32.Trojan.Re
froso.~cml
No 1.09.0009 1.09.0009 China N/A
3 N/A Executable e3539bc48326d304
420db37392bb6071
cf289f37
877ad20c044c7dbe
dfa922d7f44f236a
Worm.Win32.K
lez.J
No N/A N/A 10.108.52.92/32 N/A
4 SubCam Executable e2a08bc9039fcac4
53378ae129e9ed9f
908aad3f
18ac01287e99e6e2
0c7c2521c402080e
Backdoor.Win
32.wootbot.~
A
No 1.00.0014 1.00.0014 United States N/A
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
18

Safe Entries

First Seen: 11 April 2009 at 4:45 pm
No. Company File Type SHA1 MD5 Digitally
Signed
File
Version
Product
Version
Submitted
From
1 N/A Executable 4b57a832d961d836
5da75a3a7f716b99
4292c3e6
674a19596a85127e
3aaf588c7a217426
No N/A N/A 10.108.55.52/32
2 N/A Executable cec99a3aab856eb5
14ebb1b7e49d9905
6d3ac5f4
4213347110066f4a
86a5fd632414f1a7
No N/A N/A United States
3 N/A Executable 1d63abb680176816
8a8468235cd1aaaa
f1662795
16b4e4b9b8e94697
4d27bd31a0db2521
No N/A N/A United States
4 N/A Executable 674370b675730c71
792efa0a6f362b57
401d5e3e
c3ede6a731a63690
18e81e3d94a8482b
No 8.3.0.0 8.3.0.0 198.20.167.84/32
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
 
Exclusive Offer
Get Free Endpoint Protection
Get Advanced
Endpoint
Protection

Award-Winning Security to Protect Your Clients from Cyber Attacks

Comodo Internet Security Pro

Free Antivirus protection from hackers! Get the ultimate Antivirus solution to keep your PC clean and to remove viruses from a slow or infected PC. Improve the PC performance at home or use it on-the-go!

Get Comodo Internet Security Comodo Internet Security