Malwarebytes flagging ANKI on Windows 11

On Windows 11, Malwarebytes today flagged the ANKI.exe as Malware, and the ANKI.lnk desktop short cut as malware?
Is this a false positive.

1 Like

Yes, it is.

2 Likes

I also just received this warning from Malwarebytes. See below. Not a developer by any means but is it being flagged since it is redirecting to another site,Github, (which HAS had malware introduced to code stored there in the past).?

…“release-assets.githubusercontent [dot]com/github-production-release-asset/7270538/8135514c-3987-4c94-8767-7ea6b8e4e85f?sp=r&sv=2018-11-09&sr=b&spr=https&se=2025-07-14T18%3A35%3A22Z&rscd=attachment%3B+filename%3Danki-25.02.7-windows-qt6.exe&rsct=application%2Foctet-stream&skoid=96c2d410-5711-43a1-aedd-ab1947aa7ab0&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skt=2025-07-14T17%3A35%3A09Z&ske=2025-07-14T18%3A35%3A22Z&sks=b&skv=2018-11-09&sig=%2BF9Wugj6XbdY%2BV5in8H1Qmkoc7ht5zea7lpyP%2BOlBAQ%3D&jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmVsZWFzZS1hc3NldHMuZ2l0aHVidXNlcmNvbnRlbnQuY29tIiwia2V5Ijoia2V5MSIsImV4cCI6MTc1MjUxNTgzNSwibmJmIjoxNzUyNTE1NTM1LCJwYXRoIjoicmVsZWFzZWFzc2V0cHJvZHVjdGlvbi5ibG9iLmNvcmUud2luZG93cy5uZXQifQ.BEkwvxjScC6u6TWINiuaOxwmL2wiiXlJB0I55693jis&response-content-disposition=attachment%3B filename%3Danki-25.02.7-windows-qt6.exe&response-content-type=application%2Foctet-stream”

I just ran Malwarebytes again on my own system, and I can tell you that this doesn’t seem to be due to any changes in Anki. I’ve had the same version of Anki installed on my system for at least 3 months, and past scans of the exact same install have been fine.

This appears to be coming from Malwarebytes’s AI module – https://www.malwarebytes.com/blog/detections/malware-ai . They must be doing something new with it.

1 Like

Thank you

1 Like

Whenever I download an .exe file to install Anki on Windows, I don’t launch it right away.

First I always right-click on the filename and then select Properties from the pop-up menu. In the Properties dialog, select the Digital Signatures tab.

That shows you that the file is signed by Ankitects Pty Ltd, which is the formal name of the organization that publishes Anki.

You can even click on “Ankitects Pty Ltd” and then click on the Details button, then click on the View Certificate button. The current certificate is issued by Sectigo Public Code Signing CA R36 and is valid from 2022-11-16 to 2025-11-16.

It’s a small step, but it help ensure that the .exe file you have downloaded is truly the one that was packaged by the software authors.

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.