is detecting OneDrive as malicious and blocking it please fix it.

peter@6959518a Monday 21st July 2025, 01:22:34

We are experimenting with HIPS, which detects OneDrive as malicious and asks to shut down the process. Please check to make sure it does not generate this false positive.😅

Last modified by peter@6959518a on Monday 21st July 2025, 01:23:00

Replies 3

mrwebfeeder@813093fd Monday 21st July 2025, 01:27:57

Hi Peter.

we use Certutil/Signtool to verify programs, so your report seems strange. But we'll check the error, and it will be fixed in the next version. Thanks for reporting.

Stay tuned for upcoming releases

Mario@6959518a Monday 21st July 2025, 01:40:32

I'd like to add a little more information.
It doesn't actually block OneDrive or any other program installed in AppData; it just warns that it could be a suspicious process.

But it would be nice if you could whitelist several programs installed there.

Thanks.

mrwebfeeder@813093fd Monday 21st July 2025, 01:47:19

It could be an attacker masking the process with the name OneDrive. We recommend you stop the process and check your OneDrive. Do not reuse previously downloaded versions of OneDrive.
Download a new one from the official Microsoft website. Send us the log generated by the HIPS when it processes it.

We will be happy to help.

Last modified by mrwebfeeder@813093fd on Monday 21st July 2025, 01:47:00