How to Remove “Play.exe”

What is Play.exe?

Play.exe is a legitimate process file popularly known as Easy CD Creater API. It belongs to Easy CD Creator API, developed by Roxio. It is located in C:\Windows\System32 by default. Malware programmers write virus files with malicious scripts and save them as Play.exe with an intention to spread virus on the internet.

Affected Platforms: Windows OS

How to determine if your computer is infected with Play.exe malware?

Look out for these symptoms to check if your PC is infected with Play.exe malware:

  • Unstable internet connection
  • Play.exe occupies extra CPU space
  • PC processing speed slows down
  • Browser often redirects to irrelevant websites
  • Browser is bombarded with hordes of popup ads
  • Computer screen freezes repeatedly

Take the following steps to diagnose your PC for possible Play.exe malware attack:

Step 1: Simultaneously press CTRL+ALT+DEL keys to open Task Manager.

Step 2: If you notice the file located outside C:\Windows\System32, perform an antivirus scan to get rid of the malware.

How to remove Play.exe malware from system using Comodo Antivirus?

Step 1: Download our award-winning Free Antivirus

Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.

Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.

Step 4: Restart your PC after the installation gets over

Step 5: Wait for Comodo Internet Security to update the antivirus.

Step 6: Proceed with the quick scan that automatically begins after the update.

Step 7: If threats are found during the scanning, you will be notified through an alert screen.

Step 8: Comodo Antivirus will remove Play.exe malware from your computer including all other malwares!

9

Malware Entries

First Seen: 27 February 2018 at 6:22 pm
No. Company File Type SHA1 MD5 Malware
Name
Digitally
Signed
File
Version
Product
Version
Submitted
From
Malware Behavior
1 Sprout Games, LLC Executable b506ad9d1afd49ae
cec31ec3b6ae0866
01c4435d
4cb0cd9390f6e7ff
848af112d8d49cba
Virus.Win32.
Virut.CE
No 2.4.2.2 2.4.2.2 10.224.25.40/32 N/A
2 N/A Executable e02eec0801755bc3
1544447743740cef
d9f61afa
19c5514f9ce93c0f
69874519c722ffa2
Win32.Neshta
.A
No N/A N/A 191.102.120.15/32 N/A
3 N/A Executable cb852c53cdd5d27f
55f1a34e89ab6ac0
efc3038a
eeef0b89b8b87ce7
90b24254e7f4e2cc
Virus.Win32.
Ramnit.A
No N/A N/A China N/A
4 N/A Executable 92a7a074a458f4b6
e4936bb50a3b0e2a
26bc970b
29c5ff4024e5f97e
ff5eff74370578fd
Virus.Win32.
Virut.CE
No N/A N/A Egypt N/A
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
3

Safe Entries

First Seen: 22 February 2018 at 8:27 pm
No. Company File Type SHA1 MD5 Digitally
Signed
File
Version
Product
Version
Submitted
From
1 N/A Executable 6b455ba0167d3df2
c0f7b97dabe48fca
3e443416
f63c2a90d528dc8c
c6545b6bf98dfe8d
No N/A N/A United States
2 PPlayer Corporation Executable 20b83b3ec9711c25
06775d31fb71d347
45a27d54
8012308b5a5b8212
d34b28392aa5aee9
Yes 1.2.2 1.2.2 China
3 网龙 Executable fe8cb0725bc687f8
f157916bec2083d6
d9384c92
73b3d48f922f4d2e
80d30027fbd2b307
Yes 1.1.0.9 1.1.0.9 156.220.129.125/32
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
 
Exclusive Offer
Get Free Endpoint Protection
Get Advanced
Endpoint
Protection

Award-Winning Security to Protect Your Clients from Cyber Attacks

Comodo Internet Security Pro

Antivirus Protection protection from hackers! Get the ultimate Antivirus solution to keep your PC clean and to remove viruses from a slow or infected PC. Improve the PC performance at home or use it on-the-go!

Get Comodo Internet Security Comodo Internet Security