Composers Desktop Project Forum

Following reports of potential viruses in the PC distribution, the whole CDP program set has been put through an online checker (Jotti.org) which sends files to 13 virus scanners, including all the well-known ones. Only three files caused any problems, with just two scanners: two of those are not user-level programs (just used internally by Soundloom) and the third is a long-standing and unaltered utility. 

We are sure these were false positives; however, we've substituted slightly earlier builds that passed the scanners' tests. So we can say with confidence that all the contents of the _cdprogs folder and all other supplied exes have been passed by 13 virus checkers and have not been found to contain viruses. We will continue to ensure that any further code revisions are similarly virus-checked. However, all software and files are supplied "as is", so users should always satisfy themselves about the integrity of the download.

There were also concerns about the use of an installer exe. For PC, CDP now supplies a plain zip file containing the folder CDPR8, which you simply place in any desired location (with no spaces in the path, so not in "Program Files", for example) and can rename as you wish.  For MAC, the installation has always been via a disk image file (dmg) and this is continuing. 

Hello! Really want to give this a go. Am familiar with false positives from AV products...(I think to resolve that on a per-product basis you have to report it to each vendor).  But - why not provide hashes or gpg sigs? : )

Amazing, thanks so much!

I am a SuperCollider person at heart, but the past three weeks I have been heavily invested w CDP/Soundshaper. Just used it actually for an ongoing sound installation, combining CDP sounds with generative triggering of SC:)

There are a few small updates to the CDP program set, fixing bugs in the following programs:
• filter: fix for 'fixed' filterbank
• fractal: the correct program)
• spec: fix to "grab" (extract single window) when writing pvx format outfile
• fastconv: change "fconv" to "fastconv" to fix it
• tv (Tabula Vigilans): v 1.5g with working MIDI input. (Mac version still on 1.5f)
• SoundLoom: on MAC, various GUI issues

PC users can download an update file here:
https://www.ensemble-software.net/downloads/cdp8-2025-win32.zip
or here:  https://www.rwdobson.com/cdp8-2025-win32.zip
Unzip the file and copy the replacement programs into your _cdprogs folder (except for SoundLoom, which is placed outside the folder, but within _cdp.)

MAC versions are also available: https://www.rwdobson.com/CDPMac-U1-2025.zip (7.5MB)

We will soon be adding updates to the CDP downloads page, so that small changes like these can be accessed easily.




 

Quote from: j_p_higgins on August 19, 2025, 04:01:01 AMAsciiget is a a 42kb utility that is used to get a file name, it is not a virus. The full source code for it is here:
https://github.com/ComposersDesktop/CDP8/blob/11cdcb4a6742f7ada1ded43e436a77a94d7c4ee4/dev/standnew/asciiget.c

I'm reading the code, so I'm asking how it is possible that it is detected as a trojan virus by some AV softwares. Apparently there is no internet logic in that code, so am I crazy? I'm very skeptical in general so I'm not going to install this until a solution has been found.

Malwarebytes detects it as a trojan for instance, same for microsoft defender (those are the 2 I scan with usually)

Quote from: Robert Fraser on June 13, 2025, 10:37:10 AM.....

Please report any further bugs found, either through this forum or by email (see ensemble-software.net/links). Suggestions for improvement are also very welcome.

This link works better:

https://ensemble-software.net/links.html

I downloaded libaaio from slackbuilds and built it. make got further along but now I'm stuck @
[ 99%] Linking C executable ../../../../NewRelease/listaudevs
/usr/bin/ld: cannot find -ljack: No such file or directory
collect2: error: ld returned 1 exit status
make[2]: *** [dev/externals/paprogs/listaudevs/CMakeFiles/listaudevs.dir/build.make:98: NewRelease/listaudevs] Error 1
make[1]: *** [CMakeFiles/Makefile2:7645: dev/externals/paprogs/listaudevs/CMakeFiles/listaudevs.dir/all] Error 2
make: *** [Makefile:156: all] Error 2

PS I'm on mint

Quote from: Robert Fraser on August 16, 2025, 03:16:25 PMI've just checked both installers (Full and Lite) through my virus checker (Trend Micro) and it found no problems. However, users who are worried about this aspect can download a simple zip file containing the required folder CDPR8 (which you simply copy anywhere or rename as you like).

As mentioned in my last post above the zips (which are the latest updated versions) can be accessed here:
  www.soundshaper.net/dloads.html#CDPZIP
or its mirror site: www.ensemble-software.net/dloads.html#CDPZIP

Just be careful not to have any spaces in the path - so don't put CDPR8 in Program Files, for example.

Just to be doubly sure I just downloaded the CDP zip from Roberts site linked above as a fresh download, unzipped and ran it through bitdefender and it found no threats.

Quote from: skraningert on August 18, 2025, 07:49:52 PMAlso getting the error.
Unzipped Install_CDPRelease8_PC with 7Zip, scanned with Malwarebytes. One file caused a problem - ASCIIGET.EXE. I hate to say it, but I think someone slipped a virus into one of your programs.

Asciiget is a a 42kb utility that is used to get a file name, it is not a virus. The full source code for it is here:
https://github.com/ComposersDesktop/CDP8/blob/11cdcb4a6742f7ada1ded43e436a77a94d7c4ee4/dev/standnew/asciiget.c

Do you all know that the install files are damaged? They won't install. Is there a place to get working install files for Mac OS 15.6?

Thanks!
--Chad