Detected: PUA:Win32/Vigua.A

[Rinke]

When installing, I'm receiving this message by AVG anti virus: FileRepMalware. Does that mean that it just doesn't know the program?

[j_p_higgins]

Also getting the error.
Unzipped Install_CDPRelease8_PC with 7Zip, scanned with Malwarebytes. One file caused a problem - ASCIIGET.EXE. I hate to say it, but I think someone slipped a virus into one of your programs.

Asciiget is a a 42kb utility that is used to get a file name, it is not a virus. The full source code for it is here:
https://github.com/ComposersDesktop/CDP8/blob/11cdcb4a6742f7ada1ded43e436a77a94d7c4ee4/dev/standnew/asciiget.c

[j_p_higgins]

I've just checked both installers (Full and Lite) through my virus checker (Trend Micro) and it found no problems. However, users who are worried about this aspect can download a simple zip file containing the required folder CDPR8 (which you simply copy anywhere or rename as you like).

As mentioned in my last post above the zips (which are the latest updated versions) can be accessed here:
  www.soundshaper.net/dloads.html#CDPZIP
or its mirror site: www.ensemble-software.net/dloads.html#CDPZIP

Just be careful not to have any spaces in the path - so don't put CDPR8 in Program Files, for example.

Just to be doubly sure I just downloaded the CDP zip from Roberts site linked above as a fresh download, unzipped and ran it through bitdefender and it found no threats.

[Algorix]

Asciiget is a a 42kb utility that is used to get a file name, it is not a virus. The full source code for it is here:
https://github.com/ComposersDesktop/CDP8/blob/11cdcb4a6742f7ada1ded43e436a77a94d7c4ee4/dev/standnew/asciiget.c

I'm reading the code, so I'm asking how it is possible that it is detected as a trojan virus by some AV softwares. Apparently there is no internet logic in that code, so am I crazy? I'm very skeptical in general so I'm not going to install this until a solution has been found.

Malwarebytes detects it as a trojan for instance, same for microsoft defender (those are the 2 I scan with usually)

[countessduster]

Hello! Really want to give this a go. Am familiar with false positives from AV products...(I think to resolve that on a per-product basis you have to report it to each vendor).  But - why not provide hashes or gpg sigs? : )