PUP.EpicPlay

Published:
Last updated:

Threat Scorecard

Threat Level: 10 % (Normal)
Infected Computers: 18,445
First Seen: December 22, 2014
Last Seen: February 28, 2025
OS(es) Affected: Windows

The detection of PUP.EpicPlay on your system indicates the presence of a potentially unwanted program (PUP) that may be causing issues with your computer's performance and security. It's essential to understand what this detection means and how to properly remove the threat to prevent further problems.

What Is PUP.EpicPlay?

PUP.EpicPlay is a type of malware that is classified as a potentially unwanted program. This category of threats includes software that may not be malicious in the classical sense but can still cause significant disruptions to your system's functionality and compromise your privacy. PUPs often find their way onto computers through bundled software installations, where they are included alongside legitimate programs without the user's full knowledge or consent.

How PUP.EpicPlay Operates

Once installed, PUP.EpicPlay can operate in various ways, depending on its design and purpose. Common behaviors of PUPs include displaying unwanted advertisements, collecting user data for marketing purposes, altering browser settings, and slowing down system performance. They may also install additional software or change system settings to facilitate their operation or the operation of other malicious programs. Understanding how PUP.EpicPlay works is crucial for effective removal and prevention of future infections.

Symptoms of Infection

Identifying a PUP.EpicPlay infection can be challenging, as these programs often masquerade as legitimate software. However, there are several symptoms that may indicate the presence of a PUP on your system. These include, but are not limited to, an increase in unwanted pop-ups or advertisements, unexpected changes to your browser's homepage or search engine, the installation of unknown programs, and a general decline in system performance. If you've noticed any of these symptoms, it's possible that your computer is infected with PUP.EpicPlay or another type of malware.

How to Remove PUP.EpicPlay

  1. Enter Safe Mode with Networking to prevent PUP.EpicPlay from interfering with the removal process. This mode allows you to use the internet to download removal tools while limiting the functionality of malicious programs.
  2. Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter. This will help identify and remove all components of PUP.EpicPlay and any other malware that may be present.
  3. Uninstall suspicious programs from your computer. Go through the list of installed programs and remove any that you don't recognize or that were installed around the time your issues began.
  4. Reset your browsers to their default settings. This includes Chrome, Firefox, Edge, and any other browsers you use. Resetting your browsers will remove any changes made by PUP.EpicPlay, such as altered homepages or search engines.
  5. After completing the above steps, reboot your computer and perform another scan with your anti-malware tool to ensure that all threats have been removed.

Conclusion

Removing PUP.EpicPlay from your system requires a thorough approach to ensure that all components of the malware are eliminated. By following the steps outlined above and maintaining good computing practices, such as regularly scanning your system for malware and being cautious when installing new software, you can protect your computer from PUPs and other types of malware. Remember, prevention and early detection are key to avoiding the potential harm that these programs can cause.

SpyHunter Detects & Remove PUP.EpicPlay

File System Details

PUP.EpicPlay may create the following file(s):
# File Name MD5 Detections
1. CatWSPrx.dll.vir a1e27f7b1556415737bf1449026433cc 853
2. 5847BAD3-EE64-A5D9-08A8-C0E57BC9A7E4 27b6a8a62199af49287e9fcccbe0148e 830
3. CatWSw864.sys 8cb1b67bcbca8bcb9914e535bd397469 243
4. 767b32169a9cb91d800204190ab142c7 f3585f5eb5f3a28bc5316449b61d8087 178
5. CatWSPrx.dll 3e868bdbee8c31554fe5425c57661182 1
More files

Registry Details

PUP.EpicPlay may create the following registry entry or registry entries:
CLSID
{381F1945-55BB-4760-9050-726888B22C0F}
{56E4076B-A42B-4745-BA35-34DA8AC4C2F2}
{7D5716DC-76B4-4421-908C-12A6E587F1C3}
{81699637-2BD9-4528-BD30-B066CB20E4A6}
{B351B62C-A449-4E8B-9A81-9FEB79C24384}
{BE1C29BB-72DB-4B0D-B922-609CF2A024B9}
{BF188B93-ABA5-4F5B-8AE4-22D9B15ECF12}
{C6E0D1F4-DFEB-49EA-BB26-4755A0023404}
{E1897EF4-D58B-4871-8D38-65E04BC76E53}
File name without path
b4.epicplay[1].xml
http_b4.epicplay.com_0.localstorage
http_b4.epicplay.com_0.localstorage-journal
Software\AppDataLow\ePlayConf
Software\Microsoft\Internet Explorer\DOMStorage\b4.epicplay.com
Software\Microsoft\Internet Explorer\DOMStorage\epicplay.com
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{56E4076B-A42B-4745-BA35-34DA8AC4C2F2}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18488039-9344-4dcf-A9B0-72AFA058EE44}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BF188B93-ABA5-4F5B-8AE4-22D9B15ECF12}
SOFTWARE\MozillaPlugins\npEpicPlayDisplayHost
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{56E4076B-A42B-4745-BA35-34DA8AC4C2F2}
SOFTWARE\Wow6432Node\MozillaPlugins\npEpicPlayDisplayHost

Directories

PUP.EpicPlay may create the following directory or directories:

%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\plccnhhjonaiagjelpfkclblmlppjcik
%PROGRAMFILES%\EpicPlay
%PROGRAMFILES(X86)%\EpicPlay