Fashion Merchandising Online logo
Fashion Education Books
teaching manuals ▪ reference handbooks ▪ resources for creative inspiration
Antivirus Software During Installation
The Importance of Digitally Signed Apps
All of our applications are validated and digitally signed by a trusted Certificate Authority which verifies the publisher of the app and that the application has not been altered, corrupted, or injected with malicious code. All of our book apps are signed through Microsoft Certificate Authority.

It is good practice to right click on an application - click on Properties and then click on Digital Signatures to verify that it has been properly signed. When you check the digital signature on our book applications, you will see the following under Signer Information: Janet Reed (the signer - also means the publisher) and Microsoft (the issuer and Certificate Authority).
A Heads-up Before Installing Our Book Apps
We don't know which antivirus software you are using. There are over 70 different brands today joined in the fight against cybercriminals. Each has their own critieria and virus signature database. In this, you may or may not experience a false positive when installing our apps, but we want to be transparent and give you a heads-up should you encounter an alert from your AV provider.

Today, the cybersecurity communinity has resorted to stopping the spread of malicious code before it happens. That means flagging potentially harmful software before it has been officially analyzed and determined malware. A digitally signed application is essential, but even still, it isn't guaranteed to be virus-free. This is why antivirus software (including Windows SmartScreen) may flag a clean application. Learn ABOUT FALSE POSITIVES below.

Every issue-free download and installation helps us organically build trust within the cyber community at large that our applications are indeed malware-free. So absolutely keep your SmartScreen and chosen antivirus software ON.
During the App Download/Setup Procedure, One of the Following Will Occur
1) "Do you want to allow this app to make changes to your device?" The verified publisher (Janet Reed) is visible and the file origin states it is an Internet download. This is the normal install-without-a-hitch installation.

2) The reputation-based/protection-oriented "Windows protected your PC" pop-up...."Microsoft Defender SmartScreen prevented an unrecognized app from starting. Running this app might put your PC at risk." You can then click on the underlined "More Info". Then you will see "This [file name] isn't commonly downloaded. Make sure you trust [file name] before you open it." Click Run anyway to tell Windows you approve and the installation process will begin.

3) If your antivirus software totally blocks the application file, the action will be terminated and the file will be put into quarantine. Your AV provider will say something like Threat found. Should you experience this alert, we truly apologize. We are an honest company but are bound by the current system. ABOUT FALSE POSITIVES below explains why virus-free software flagged as malware is a safety precaution until it can be determined that it is a real threat.

Should the file be quarantined, please submit the file to your chosen AV company for analysis through its provided submission portal. Indicate that it was flagged as containing a malicious trojan. This service is free and can be done directly from your computer. You will receive a determination ("No threat found") and its global signature definitions will be updated. The process takes a few hours to a few days.

The app file will not be automatically released from quarantine so you should re-download a new file from our download provider, FastSpring, which is found in the invoice email you received. In essence, you will begin anew and this time the global signature definition will recognize the file as safe and will allow the installation to proceed. Remember, you have up to 7 days to download the file from the link in your email.
About False Positives
While antivirus companies can sandbox a file to analyze and determine if it is free of malware (a thorough dynamic analysis), their initial overview of a new or unknown file is called a heuristic scan which looks for patterns common to previously discovered files that contained malware. Because this process produces both false positives and false negatives, its genuine value is disputed.

Why? Because it's not foolproof nor perfect. Cybersecurity AV companies have difficulty distinguishing a virus-free app created by an honest developer and one built by a bad player who hid a malicious trojan inside the app. What we need is a dynamic analysis system built into our personal computer, right? For now, the AV scans and Windows Defender are the best protection available and with some AV companies scanning close to 3 million files and websites per day, we realize they have a full plate. Microsoft itself processes over 165 trillion security signals each day and blocks 4.7 million malware files daily.

A true dynamic analysis is not performed until there is a reported problem. In the meantime, a very new application has to build a reputation which is based on the number of times it was installed and run with no reported issues. Lesser known software can solely be flagged because it is new, unknown, or has not yet built a reputation. Many applications do not reach the widely distributed status of software like Adobe Acrobat Reader and Zoom which are fully trusted. In our situation, content and photographic images are frequently updated to keep the material fresh. That means each new edition has to begin all over again to establish a reputation.

The AV companies risk their own reputation should they scan and approve a pre-release app as clean and then it gets altered by a cybercriminal. This can happen to (or within) any size software development company. The current industry-wide approach is to flag new applications as a "potential bad player" and otherwise wait for a red flag alert at which time it will be analyzed thoroughly.

Understand that AV vendors readily share malware-infected files with other cybersecurity companies to prevent them from spreading further. But files they analyze and determine to be clean and virus-free are not shared. ONLY THEIR OWN virus signature database is updated.
Why a False Positive May Get Triggered
1) Our application is new against your AV software's virus signature database.

2) Our application files are very large. They are filled with many color images which makes for a large file. Bad players have been known to hide malicious code in large files.

3) Each of our applications contains the full open-source Chromium engine. The Chromium engine turns HTML and CSS into an interactive website which is what makes our educational books so different and engaging. The software used to develop the formatting of the books uses the CEF (Chromium Embedded Framework). During a heuristic scan, the structural wrapper patterns mimic packaging and compression techniques used by malicious actors to hide malware. (Kind of technical terms, but trying to explain it so you fully understand.)

4) The apps also include code that serves to deter and prevent reverse engineering and theft of our intellectual property. The pattern of this code has similarities to programs that hide malware. Again, when the antivirus software checks the file against its virus signature database, the similar sequence of bytes may be interpreted as a file hiding malware.

Please reach out to us if you have questions or concerns that were not addressed here.

janet-reed-publications@proton.me

We thank you for your purchase, your trust in using our software, and for being part of our fashion community.

With warmth and appreciation,

Janet Reed, Fashion Author and CEO
Janet Reed Publications