I am seeing this also with Windows 10 defender and Malwarebytes.
Trojan:Win32/Spallowz.A!cl
Alert level: Severe
i have seen that one too, what i have found is that the hfs file downloaded was form a "ISP cache" site that had a bad version and was corrupted...
(i have worked with Microsoft "live/ defense(defender) /security essential / ms anti spyware) - the up to date official download done't get claimed as a "Trojan / virus / risk-ware / etc....
lorgarth , i would recommend you to try to re download, if have to , will place a google download link like before (https) cant' be sync-seeded via the ssl certs renewal process, so its harder for an ISP to "cache the site.....
the problem / why this topic was started was that AV program are giving a false positive...
I can 100% be sure that there is not a problem with the latest build...