Latest update had a Trojan virus? PUA:Win32/Caypnamer.A!ml

[Dan Dolem]

Exanima.exe is setting my anti virus off after the new beta update, warning about PUA:Win32/Caypnamer.A!ml. Looked up some information about it and it's supposedly a Trojan-downloader? What the hell is this?

PUA:Win32/Caypnamer.A!ml

[thraes]

i also just tried to start the game and got this warning

[Pino is reading a book]

same :/

[Merks]

It's a False Positive, it happens with insider builds sometimes, you'll just have to set it as an exception in windows.

[Dan Dolem]

Originally posted by MrMerks:

It's a False Positive, it happens with insider builds sometimes, you'll just have to set it as an exception in windows.

Well, I'm not sure about that. It's a common browser adware injector, apparently. It may be a false positive but I don't entirely trust it.

[k9]

Originally posted by Bare Mettle:

Let me guess, Kaspersky? This is a false positive which amounts to "I don't know what this program is, so I'm just going to assume it's malware". Very clever.

[Pino is reading a book]

for me it was windows defender

[[Nelly]]

Windows Defender even says the Source is from Steam Library/SteamApps "Exanima" It's a false positive, or just don't play the game.

[Demon Lord Netorare]

Originally posted by Dan Dolem:

Exanima.exe is setting my anti virus off after the new beta update, warning about PUA:Win32/Caypnamer.A!ml. Looked up some information about it and it's supposedly a Trojan-downloader? What the hell is this?

PUA:Win32/Caypnamer.A!ml

Where did you get your information? I want to read more on this as i can't find much online. Appeared in my Windows Security that says it is in my recycle bin (C:\$Recycle.Bin), presumably I think I already deleted it there(?) because the bin is empty. It was an exe file "S-1-5-21-1257039248-3171178152-3216123087-1001\$RLBY9DE.exe." I don't open any exe files at all. While half-sleeping I quarantined it instead of deleting it and want to change it now, appears to be blocked now at least. Scanned multiple times, quick, full, etc and not detecting anything new.

[Dan Dolem]

Originally posted by 󠀡:

Originally posted by Dan Dolem:

Exanima.exe is setting my anti virus off after the new beta update, warning about PUA:Win32/Caypnamer.A!ml. Looked up some information about it and it's supposedly a Trojan-downloader? What the hell is this?

PUA:Win32/Caypnamer.A!ml

Where did you get your information? I want to read more on this as i can't find much online. Appeared in my Windows Security that says it is in my recycle bin (C:\$Recycle.Bin), presumably I think I already deleted it there(?) because the bin is empty. It was an exe file "S-1-5-21-1257039248-3171178152-3216123087-1001\$RLBY9DE.exe." I don't open any exe files at all. While half-sleeping I quarantined it instead of deleting it and want to change it now, appears to be blocked now at least. Scanned multiple times, quick, full, etc and not detecting anything new.

It's really hard to know what to believe about this thing. But it seems pretty fishy to me. Why the hell would this be part of the update?? It may be a false positive but I hate wondering about stuff like this.. I restored windows back to a point before the update was out and will not play/install Exanima until this is fixed, regardless if it's a false positive that some people claim it is.

There's not a lot of information about it but here is where I read about it.

https://howtofix.guide/puawin32-caypnamer-aml/

https://howtofix.guide/caypnamer-removal/

I wouldn't panic, though. It's most likely a false positive and this website may not have the correct information. I'm just gonna wait until it's fixed.

[Dan Dolem]

Originally posted by 󠀡:

Originally posted by Dan Dolem:

It's really hard to know what to believe about this thing. But it seems pretty fishy to me. Why the hell would this be part of the update?? It may be a false positive but I hate wondering about stuff like this.. I restored windows back to a point before the update was out and will not play/install Exanima until this is fixed, regardless if it's a false positive that some people claim it is.

There's not a lot of information about it but here is where I read about it.

https://howtofix.guide/puawin32-caypnamer-aml/

https://howtofix.guide/caypnamer-removal/

I wouldn't panic, though. It's most likely a false positive and this website may not have the correct information. I'm just gonna wait until it's fixed.

Well the thing is I don't own this game and I got it by some other means unknown to me. Have what you tried in these guides worked for you in successfully removing it?

I only restored my windows to a point before the update and did a full scan and came up all clean. I'd advice to do the same if you are worried. Though, if you got it through other means that might not help you. Good luck.

[D E X I I I]

Probably just a trojan which injects the covid with a built-in dogecoin miner right in your brain via 5g to turn the gamers into exanima zombie-fanboys and raise some money. Well, if it's necessary for further developing of exanima/sui generis I'm ok with that.

[D E X I I I]

But seriously, it's pretty unusual, but what can it be if not a false positive. Some AV programs can be too much paranoid using heuristic analysis.
https://en.wikipedia.org/wiki/Heuristic_analysis
If you upload .exe into Virustotal to check the file with different AV engines, you can see they assign it names like "generic", "behaveslike" etc, so it's nothing specific, they just don't know what it is. Some of them even say it's an adware (advertisement soft) what is absolute nonsense.
https://www.virustotal.com/gui/file/1f19cb1c7357cb70da82f6c00621fb2ee25c3235f548da10ba7d0748ee82f93b/detection
I doubt Madoc has a time to harm your PC via beta branch with a self-made malware. More likely just some special coding mad skills to make exanima really unique.

[Fenix-Venix]

Could that be that virus simply decided to use this game update as mean to infecting?
I hase the ame with beta-update for game Transcendence.
It mean the source is your machine.

[WilliamsPlhc]

Originally posted by Fenix-Venix:

Could that be that virus simply decided to use this game update as mean to infecting?
I hase the ame with beta-update for game Transcendence.
It mean the source is your machine.

I had it as well. Not the first time tho this game exe from a beta update has been targeted by my AV.

[Spuddly]

It's gotta be a false-positive. Since only either Kaspersky or Windows Defender goes haywire over it.