If you’re thinking of downloading a program or update (cough, Vista SP1, cough) from a source other than the official one, you really want to make sure you’re getting the real deal and not some virus-infested fake.
One way to increase your chances of getting a legitimate download is to compare the MD5 checksum of the file you download against an MD5 checksum for the file, published by a known and trusted source. Microsoft’s File Checksum Integrity Verifier, command line tool can be used for this.
Read full article at source…