A browser says a download is dangerous: decide what to do

A download warning can refer to a known malicious file, a suspicious source or a file that has not built a reputation. The wording matters. Do not choose Keep merely because a forum post says the tool is safe, and do not assume that every flagged file is malware. Make an evidence-based decision before running it.

Pause and verify​

1. Leave the file unopened. Read the browser's exact warning and note the filename, file type and address you downloaded from. If the link came through an ad, DM or pop-up, close it and visit the developer's official site directly.
2. Ask whether you actually intended to install this program and whether the publisher offers a current download from its own domain. Compare the filename and, if provided, an official signature or checksum. A checksum posted only by the same untrusted uploader is weak evidence.
3. If the warning names malware or phishing, delete the file and seek a safer source. If it says uncommon or unverified and the program is genuinely needed, seek publisher documentation and independent reputation evidence before considering an override.
4. If you already ran it, stop entering passwords on that device. Scan it, review recent app and extension changes, and secure important accounts from a trusted device if behavior is suspicious.

The protection tradeoff​

Chrome's Safe Browsing levels explain that Standard protection warns about identified dangers, while Enhanced protection performs deeper checks with a different data-sharing tradeoff. Neither setting proves every allowed file is safe. The useful question is whether the source, signature and purpose all make sense. Our Windows download checklist adds file-specific checks without treating a single scanner result as a verdict.