Switching the updater to implement https instead of recent plaintext http might be superior and simple initial step. It is really good bonus if What's more, it checks new exe's signature, but in very first position, it should not make it possible for everyone on the way in which to intercept requests so quickly.*) make DLL hijacking assault not do