We checked up the file %WinDir%\PLAY.DLL and found it hazardous.
The file %WinDir%\PLAY.DLL must be deleted from the system immediately.
Kill the process %WinDir%\PLAY.DLL and remove %WinDir%\PLAY.DLL from the Windows startup.

%WinDir%\PLAY.DLL Information and Removal:
PLAY.DLL is known as: Trojan.Crypt.Delf.F [Ikarus].
MD5 of PLAY.DLL = 65BAF80F7BD64C80C563599B203F5B80
PLAY.DLL size is 501248 bytes.
Full path on a computer: %WINDIR%\PLAY.DLL
Related Files:
%APPDATA%\MICROSOFT\CRYPTO\RSA\S-1-5-21-606747145-764733703-839522115-1003\71DA1F76509D9C721D84655251014C87_A7BCC1A4-F7A4-4502-8650-8579E607F7F7
%PROFILES%\REMO\
%TEMP%\14.TMP
%WINDIR%\AUTO.MSI
%WINDIR%\BCEF.DLL
%WINDIR%\BJURI.DLL
%WINDIR%\BRADA.DLL
%WINDIR%\BRASIL.DLL
%WINDIR%\INSTALLER\24FDF.MSI
%WINDIR%\PLAY.DLL
%WINDIR%\PROJETO.EXE
%WINDIR%\SCS.EXE
%WINDIR%\SCSCEF.EXE
%WINDIR%\SCSG.EXE
%WINDIR%\TASKS\REGISTRO.JOB
%WINDIR%\TASKS\UPDATE.JOB
%WINDIR%\UNI.EXE
%WINDIR%\UPDATE.BAT
%WINDIR%\WGET.EXE