Any Windows Updates pending?
And you’ve run Norton LiveUpdate + Restart (not Shut down) machine…a few times.
And you’ve run Disk Cleanup/Storage Sense…system temporary files/cache + Restart (not Shut down) machine?
You installed onedrive.exe…yourself…from what source?
Did you install “bundled software” “other software” from the source?
Are you signed in to Microsoft account?
Are you synching new machine with other devices?
\AppData\Local\Microsoft\OneDrive.exe = head scratch
Maybe, your new machine has pre-installed trialware/freeware? that Norton detects?
Did you run Norton full scan + Malwarebytes threat scan.
How to install and run a scan with Malwarebytes here
=================================================
AI Overview
Ongoing notifications for Win32:PUP-Gen or Win32:OpenCandy threats related to onedrive.exe likely indicate that your security software has detected bundled software (PUA), not necessarily that the OneDrive application itself is infected. This PUA, like OpenCandy, often comes bundled with other freeware and performs potentially unwanted actions, such as installing toolbars or modifying browser settings. To resolve this, update your antivirus/anti-malware software to the latest version, then perform a full system scan. If the threat is identified, follow the security software’s instructions to remove or quarantine it, then restart your computer and run another scan to confirm.
Understanding Win32:PUP-Gen and Win32:OpenCandy
- Potentially Unwanted Programs (PUPs):
Win32:PUP-Gen and Win32:OpenCandy are classified as Potentially Unwanted Programs (PUAs) or Potentially Unwanted Programs (PUPs), rather than true malware.
- Bundling:
These are often bundled with legitimate free software that users download from unofficial sources.
- Undesirable Behaviors:
They can modify browser settings, install unwanted add-ons, change the homepage, or inject into other processes.
- False Positives:
They can sometimes be flagged by antivirus software even if they are not directly related to the OneDrive application, especially if the user was trying to install another program.
======================================================
fwiw ~ boiler plate
Did you clear browser cookies n cache? system cache?
Do you run browser/device sync?
Did you recently install any program / browser extension?
Did you recently allow push notifications?
Did you recently change site permissions?
Did you run Norton full scan?
Did you run Malwarebytes threat scan?
==========================================================
https://en.wikipedia.org/wiki/OpenCandy
FreeFileSync_5.18_Windows_Setup.exe - VirusTotal report … Win32:OpenCandy-D [PUP]