I'm downloading it now. 509 MB and on my 50Mbs connection it is taking 3-4 minutes.
For some utility or other that is just huge!
I can see from http://www.winpenpack.com/en/page.php?28 that it bundles a large number of applications.
Being that size, I can't send it to either of the two online file malware scanner sites, because they limit uploaded files to 20MB or so.
However, I did scan it with my own ZoneAlarm anti-virus component, (it took 4 and a half minutes to scan), and with an updated MBAM scan, and they both found nothing.
So, about OpenCandy:
It isn't malware but is Adware. I agree that it is likely to be unwanted, but if it is bundled into the WinPenPack installer file then that will be the developer's choice and I am unsure what you can do about that.
It's a shame because that utility seems a useful one.
I downloaded this program and installed on my flash drive to help with cleaning and repairing pc's with xp still installed. And somewhere along the installation of it onto my flash drive, my security software Microsoft Security Essentials was deactivated. I didn't notice it happening and didn't realize it til I rebooted my laptop and it said that MSE couldn't be loaded and that I had to reinstall it. After doing so, MSE reported that I had an infection and listed it as being in the WinPenPack installation file which I did not install on my laptop. So I did a scan of my Flashdrive and sure enuf MSE found it infected with Startup Manager/OpenCandy/OCSertupHlp.dll
After doing research it's been verified that this is definately an Adware/malware program. Here is a forum discussion at Malwarebytes where they are actually arguing with the makers of OpenCandy. It's quite entertaining.