How to download programs safely
Many infections start with a program that looked useful: a free tool, a game add-on or a driver from the wrong website. A few simple checks make downloads much safer.
Download from the maker
- Get programs from the maker's own website or from the Microsoft Store.
- Type the address yourself or use a bookmark instead of clicking ads in search results; fake download pages often buy the top places.
- Be careful with big "Download" buttons that are part of an advert.
Read what Windows tells you
When you start an installer, Windows shows who published it. A known, verified publisher name is a good sign; "Unknown publisher" means the file carries no code signature, so you cannot see who made it. Microsoft Defender SmartScreen may also warn about programs that few people have downloaded yet. Take these messages seriously, especially when you did not expect them.
Check the checksum
Many makers publish a SHA-256 checksum, a fingerprint of the exact file. If even one byte was changed, the fingerprint changes. To check it, open PowerShell in your Downloads folder and run:
(Get-FileHash .\filename.exe -Algorithm SHA256).Hash
Compare the result with the checksum on the maker's website. If it does not match exactly, do not run the file: delete it and download it again from the official page.
After the download
- Install only what you need, and read each step of the installer: some offer extra programs you did not ask for.
- Remove programs you no longer use; fewer programs mean fewer security holes.
- Keep the programs you use up to date.
How Malzox helps
Malzox watches your Downloads folder and checks every new or changed file for malware straight away. When you start a program from outside Windows and Program Files, for example from Downloads, the Desktop or a USB drive, Malzox holds it for about a second while it checks it. Confirmed malware is stopped and locked away; anything only suspicious stays paused until you decide.