In this section, we're going to explore how to protect yourself from delivery methods. To prevent a man-in-the-middle attack, use tools such as XArp, or static ARP tables, and avoid networks you don't know or trust. Another precaution is to ensure you're using HTTPS when downloading updates. This will reduce your risk of downloading a fake update.
Another tool that is useful is WinMD5. This program will alert you when a file's signature or checksum has been modified in any way, which indicates that a file may have been tampered with, or is not the original file. To check, download and run WinMD5, where you can compare signatures and checksums for a file. If the values are the same, the file is safe, as shown in the following screenshot:
MD5 checksum value generated
