Downloads: .msi and .zip only, note on AV warnings

README.md

@@ -16,20 +16,25 @@ Download from the [latest release](../../releases/latest):
 
 | File | For |
 |---|---|
-| `darthvader-<version>-win64.exe` | Normal install (NSIS), Start menu + desktop shortcut |
-| `darthvader-<version>-win64.msi` | MSI, for unattended/managed deployment |
+| `darthvader-<version>-win64.msi` | Normal install — Start menu + desktop shortcut, uninstall entry |
+| `darthvader-<version>-win64.zip` | No installer: unpack anywhere and run `bin\darthvader.exe` |
 
-Windows 10/11 64-bit. The packages are **not code-signed**, so SmartScreen shows
-a warning — choose *More info* → *Run anyway*. Everything is bundled (Qt, codecs,
-LADSPA plugins); nothing else needs installing.
+Windows 10/11 64-bit. Everything is bundled (Qt, codecs, LADSPA plugins);
+nothing else needs installing.
 
 Silent install:
 
 ```cmd
-darthvader-<version>-win64.exe /S
 msiexec /i darthvader-<version>-win64.msi /qn
 ```
 
+### Antivirus warnings
+
+The packages are **not code-signed**, so SmartScreen warns on first run
+(*More info* → *Run anyway*), and a few engines flag them on reputation alone
+— Microsoft Defender on a real machine does not. Verify the SHA-256 against
+`SHA256SUMS` in the release; that is what the checksums are there for.
+
 DV3000 / ThumbDV / DVstick sticks appear as COM ports through the FTDI VCP
 driver and are detected automatically. If audio stutters, lower the port's
 *Latency Timer* to 1–2 ms in Device Manager → Port Settings → Advanced.