Little issue, the downloads for CDP are being flagged as an Trojan

[moxie-coder]

When I attempted to download CDP from here https://www.unstablesound.net/cdp.html it kept saying Virus detected in the downloads. And when I scanned the file within virustotal, I saw this https://www.virustotal.com/gui/file/cc9709493b119aa4efc56f44c94da80e30acdbf61b88bc889f178eeb6538459d/detection

I really don't know what to do, or how legitimate this is. Since it's not being flagged by one or two, but 12 AVs

[j-p-higgins]

This is being caused by three main things:

• Firstly CDPs installer is a self extracting zip file. This is a very old way of installing software (CDP is very old) and is not commonly done by many legitimate pieces of software.
• Secondly the zip contains a lot of very small .exe files. Each process in cdp is it's own executable. There is absolutely nothing wrong with this but again it is an old way of doing things and not common in legitimate software.
• Thirdly CDP is not a well known piece of software. The final thing most AI antivirus scanners (which these are) use to check if something is a virus is called reputation. If they can find thousands of people talking about it and using it, they assume it to be safe.

All of this basically combines to make CDP look a lot like a virus to antivirus software. However CDP is open source, with a public board or representatives and has been used by composers for decades. For this reason I choose to trust it.

There is more info about this on the CDP forum here: https://unstablesound.net/cdpforum/index.php?topic=292.0