So we have to download it directly from ledger site then no matter what?
You don't need to download anything from Ledger's site just for the sake of updating, but you need to download the installation file whose authenticity you are verifying. But again even though its posted how to check the legit files, i want to make sure I do it right.
The thread and the replies by other members show how to do it right. Don't ask questions for every step of the process. Everything is explained. Has there been even one case of someone downloading ledger live from the correct ledger site and then downloading malware?
I just checked with all people on earth who use Ledger Live. The answer is negative. Again I want to verify the ledger live but all this hash sum and these things... are not that simple. So you need to download a hash on a different site before you download ledger live?
You do it exactly the way it was explained in the OP. That's why it was written in the first place. It wasn't written so that Jerry can ask whether or not it's the right way to do it. I can't imagine for the average user that doing something like this is simple
My condolences.If you just look at that... how do you even know where to look for the hash etc.
By reading what is written on the site from top to bottom. You can do that, right? Click on all of the links and download them to the same folder. Now when i look at verifying the files... we also need to download another program? I see its called hashbit. How do you make sure a program like hashbit is malware free etc?
How have you made sure the other programs on your Windows computer are malware-free? Have you? Have you made sure the Ledger Live app you are using is malware-free? Use Hashbit if you want or try the open-source apps that dkbit98 recommended in one of his replies. Again, read the thread. 
:
