If I don’t have any gpg version installed, how can I check distribution gpg4win.exe?
Indeed this is sort of a problem.
If you want to do it right, you probably
must coordinate with someone who already
aquired gpg in a save way and whom you trust.