False Positive RiskWare.Injector

[FinDude]

I read the post about "Before you report a false positive" and there is no save or download option.  I followed it to this link: https://blog.malwarebytes.com/detections/riskware-injector/

Image of my MalwareBytes screen is attached.

I am the owner and author of this product.  We are a software company that has been in business since 1998 and we provide this file to our users and to people that pay for the software products or our courses.

Here are the links to download the software (three versions off the same file) all built with PaquetBuilder Installer.  The Malwarebytes scanner grabbed this when the link on the website is clicked for the download:

http://www.ablhelp.com/FsJ3m992Vvsf963Ms2F/ABL-Help_Classic.htm 

http://www.ablhelp.com/P3kwrEs28tF/JustHelp.htm

http://www.ablhelp.com/KWDksjdkjelksSH0/JustHelp.htm

[shadowwar]

I am not showing any current detections on the files. Can you please attach a scan log showing the detection to verify?

 

Also your screenshot is from may of 2021?

 

Edited January 7, 2022 by shadowwar

[FinDude]

It might not be logging it.  Te issue is the browser link.  I go to the download page and click the link and I get a rather abrupt warning.  Why is this suspicious content?:

[Porthos]

1 hour ago, FinDude said:

Te issue is the browser link.  I go to the download page and click the link and I get a rather abrupt warning.  Why is this suspicious content?:

That is a Browser guard block. I will get the correct team to look into it.

@gonzo

Edited January 7, 2022 by Porthos

[gonzo]

The site has been whitelisted. Please allow 15-30 minutes for changes to take effect. Sorry for the inconvenience.

If I were to use the link on the left, I would likely receive a suspicious download block.  Using the one on the right instead gives a suspicious content block.  Your web page says to rename it, as you are trying to avoid firewall blocks.  Renaming a file does not change the contents of the file, which would indicate that it is an executable.  An executable with any extension that is not associated with an executable would appear to be malicious.  Your note takes care of the fears (from a human perspective), but protection software is far from human.

I did test the site (due diligence), but thank you for providing that note on the download page.