Online Safety · 5 min read
How to Avoid Fake and Malicious Downloads
Fake installers distributed through search advertising and lookalike domains are one of the most productive malware delivery channels currently in use — including for antivirus software itself.
Published 2026-08-09 · Last updated 2026-08-09
Find the real source
Type the vendor's domain directly, or use a bookmark. Scroll past sponsored results; attackers routinely buy ads for the exact product name and clone the landing page pixel for pixel. Check the domain spelling character by character before downloading.
Warning signs on a download page
Multiple green Download buttons, a countdown before the link appears, a demand to install a 'download manager', 'your version is out of date' banners, and file names with random suffixes. Any one of these means leave.
Verify before running
Check Properties → Digital Signatures for a valid publisher. Compare the SHA-256 hash where one is published. Right-click and scan with your antivirus. If the installer tells you to disable your antivirus first, delete it.
Frequently asked questions
- Are download portals safe?
- Some are, many bundle adware into repackaged installers. The vendor's own site is always the better option.
- How do I know a download page is official?
- The domain is the only reliable signal. Branding, layout and certificates can all be copied.