If you're confident that the link does more harm than good, don't hesitate to remove it right now.
You can start a discussion on meta or in a chatroom to hear other opinions about the software if you feel you need them. If it turns out that you were wrong, the edit can easily be reverted again and no damage will be done. On the other hand, if you are right and the software causes harm on its users, every hour the link stays there is a potential damage. Sure, we're all supposed to be skilled computer users and be smarter than blindly downloading and installing any crap somebody links to but my confidence that this assumption holds true is actually pretty low.
If you feel that the link is not merely an addition to the answer but essential for it to be valid, consider re-phrasing the text. For example, replace
You can download this fantastic tool and get the job done quickly.
with something like this.
There used to be a tool called Evil Malware that allowed you to get the job done quickly. However, usage of Evil Malware is no longer recommended and the link to its download page has been removed from this answer as several people have raised concerns that it has severe security flaws and might contain evil malware.
It doesn't invalidate the answer and those who feel inclined enough can still look at the edit history or search the web for the tool at their own risk. Also note that I have phrased the text in a way that avoids associating the original author of the answer with the claim that the software is evil or makes exaggerated claims. There is no need to be more dramatic than what the facts currently provide for.
If the answer becomes totally useless after removing the link to an external page, then it doesn't meet the quality standards of the site anyway and should be flagged for deletion. Still edit the offending link out as deletion might take a while.
While it is generally good etiquette to discuss edits to other people's posts, I don't believe that we need to tolerate links to malware on the site any longer than necessary. This might also be a legal issue but I'm actually more concerned about the site's visitors and reputation.