You are here

CDExPortable - Virus (False Positive?)

2 posts / 0 new
Last post
sjiejzlenfle
Offline
Last seen: 7 years 3 months ago
Joined: 2015-09-26 20:16
CDExPortable - Virus (False Positive?)

I have been using CDExPortable, but I've recently had doubts about it. VirusTotal is showing it as mostly clean:
https://www.virustotal.com/en/file/e525c8175c8a6aa9f32f37d8c416fd9f2914f...

but this site is showing possible malware:
https://www.hybrid-analysis.com/sample/e525c8175c8a6aa9f32f37d8c416fd9f2...

Unfortunately, I don't really understand the results above. I ran another analysis of the non-PortableApps version and it showed OpenCandy, which my research seems to say is obnoxious and invasive, but not necessarily dangerous.

Running these was prompted by the fact that on the http://cdex.mu website there is no way to download the source code (removed?) and no way to contact the developers (no email or forum). I tried to email the owner of the domain asking for the code, but got no reply.

I did notice that there are a couple unofficial versions on github, but the official version is no longer on sourcefourge that I can find.

So, my question is, does anyone here (maybe the CDEx developer himself?) have contact with the developers of CDEx to obtain the source code, or have knowledge enough about the above analysis to vouch for the safety of the program? The software has been useful to me, but it makes me nervous to run something with all of the following three characteristics: 1) analysis showing possible malware, 2) All source code links removed from site the & sourceforge, 3) all ways to contact developers removed from the website. I'm guessing the maintainer just has been doing other things and it's probably fine, but--as I said--it makes me nervous.

Also, unrelated: I think the password reset on PortableApps.com may be broken. I have an old account I forgot the password to, but it never sends me an email when I've tried to reset it. Could be wrong. Maybe my account got deleted.

vf2nsr
vf2nsr's picture
Offline
Last seen: 7 years 5 months ago
Developer
Joined: 2010-02-13 17:10
I do not use the software

I looked at virus total and 0/56
I looked at second link 1/57 1% threat

I looked over the CDex site and looks like links broken

I did see PortableApps has source but looks a little out dated so will wait for someone else to respond more knowledgeable than me

FWIW https://sourceforge.net/projects/portableapps/files/Source/CDEx/ however again it seems a little out of date

“Be who you are and say what you feel because those who mind don't matter and those who matter don't mind.” Dr. Seuss

Log in or register to post comments