Hubbry Logo
CDexCDexMain
Open search
CDex
Community hub
CDex
logo
8 pages, 0 posts
0 subscribers
Be the first to start a discussion here.
Be the first to start a discussion here.
CDex
CDex
from Wikipedia
CDex
DevelopersAlbert Faber, Georgy Berdyshev
Initial release2000; 25 years ago (2000)
Stable release
2.24 / 12 August 2020; 5 years ago (2020-08-12)
Written inC, C++, Python
Operating systemMicrosoft Windows
TypeCD ripper
LicenseFreeware (ad supported)
Websitecdex.mu

CDex is a freeware software package for Digital Audio Extraction from Audio CD (a so-called CD ripper) and audio format conversion for Microsoft Windows. It converts CDDA tracks from a CD to standard computer sound files, such as WAV, MP3, or Ogg Vorbis. CDex was previously released as free software under the terms of the GNU General Public License (GPL); however, although the website claims that this is still the case, no source code has been released since 2005. It was originally written by Albert L. Faber, and is developed and maintained by Georgy Berdyshev. Recent versions of the software may be compromised and a security threat.

Features

[edit]

CDex is able to convert CD audio into several formats including WAV, Vorbis, MP3 (using the LAME encoder), VQF, Musepack, APE, and many others. As of version 1.70b2 FLAC encoding is native, but for version 1.51 FLAC[1] and other codecs can be used by using an external encoder. It supports CD-Text to allow ripped tracks, with reduced user effort, to have the names of songs, artists and albums. It can also automatically identify (most) inserted audio CDs and look up the metadata by means of an online database (freedb) for automatic tagging, naming and sorting of ripped files.[2] It also includes cdparanoia for robust CD reading. CDex is considered to be very configurable and relatively easy to use.

History

[edit]

In 2000, at the start of the beta phase for version 1.30, CDex was turned into a free software project (cdexos: CDex Open Source) and hosted on SourceForge.net.[3] In January 2006, the CDex homepage requested a new project manager and developer, implying that Albert L. Faber had abandoned development of CDex. On 5 June 2006, CDex 1.70 Beta 1 was released via the SourceForge.net website (ascribed to Georgy Berdyshev). It was the first official update to the program in almost three years, with CDex 1.70 Beta 2 following soon after on 23 June 2006. In 2008 Berdyshev was joined by Ariane Gomes as project developers. On 18 November 2009 CDex 1.70 Beta 4 was released. CDex 1.70 Final was released on 29 June 2014 featuring a Unicode and Multibyte version.

On 30 June 2007, just one day after the release of the GPLv3, the license of CDex was updated. However, the last version for which source code was made available is 1.70 Beta 2, and the SourceForge project appears to have been shut down in July 2015, shortly after the release of version 1.79.

From version 1.76 the installer includes the adware OpenCandy.

In November 2017 version 1.96 was released.[4] It is not clear who is the current code maintainer, and no contact details are provided. Four further versions were released by March 2018.

The default Remote Server database in CDEx, Freedb, became inaccessible by June 2020. The gnudb.org site at location gnudb.gnudb.org (on HTTP port 80) using proxy.gnudb.org works as a replacement for the inactive default Remote Server database.[5]

Potential risks and adware controversy

[edit]

Online discussions over concerns relating to the safety and security of CDex have been ongoing since at least 2013[6] with many asserting that the software has become malware. Post-2013 reincarnations of CDex have seen a number of sponsored programs being automatically selected (or selected without any knowledge at all) during installation with little information about their nature. Scan results suggest there may be risks attached to installing them.[7]

Open source commentators have suggested that the current maintainer and software should not be trusted and even that CDex should be avoided outright. Support links are now broken and the ticketing system no longer exists. There are no contact details provided or any way to interact with the developer. The installer bundles adware without any notifications. Despite updates nominally being made to the application, some of these have involved bundling the installer with hidden adware. MalwareBytes has adopted the stance, as of 2019, that CDex contains potentially unwanted programs and thus flags the CDex package as malware.[8] The rolling back of source code availability has prevented a proper audit and stymied any potential defence of CDex's case. Further, anecdotal discussion has resulted in claims that versions of CDex from the latter half of the 2010s are adding artifacts to the ends of certain tracks ripped by the program.

References

[edit]
[edit]
Revisions and contributorsEdit on WikipediaRead on Wikipedia
from Grokipedia
CDex is a digital audio CD extractor and converter for that allows users to rip audio tracks from and encode them into various formats such as , MP3, , , M4A, , and others. Originally developed by Albert L. Faber in 2000, the project has been maintained by Georgy Berdyshev since 2006. The software supports features including jitter correction, /FreeDB integration for metadata retrieval, , , on-the-fly encoding, and playlist creation in formats like and PLS. It has been available in both installer and , with the latest being version 2.24 in August 2020. CDex was initially released under the () with publicly available, but as of version 1.70, source code releases have ceased despite the official website continuing to claim GPL licensing and status. Since the mid-2010s, the software has faced significant criticism due to its installers bundling via wrappers such as FusionCore and earlier , resulting in detections as or by security software including Malwarebytes. Versions up to 2.24 have been flagged by various antivirus scanners for potential security risks and malicious behavior, prompting many users and review sites to recommend caution or older ad-free variants.

History

Origins and early development

CDex was originally developed by Albert L. Faber as a free utility for extracting from and converting to compressed formats such as MP3. The first public release was version 0.15 in August 1998. Early development focused on adding support for external encoders, , and improved and encoding functionality. Key milestones included version 1.00 in October 1998 (introducing remote support and external encoders) and version 1.20 in December 1999 (adding FAAC support and a simple MP3 player). Around 2000, during the beta phase for version 1.30, CDex transitioned to status under the (), with source code hosted on under the project name "cdexos" (CDex Open Source). The for version 1.20 beta 9 noted the move to with source availability on SourceForge. Version 1.30 betas (reaching beta 9 by 2001) introduced features such as encoder support, and submission, ID3 v1.1 tags, and upgrades to the LAME MP3 encoder. The project emphasized continuous development influenced by user feedback and via the page. CDex gained adoption as a popular for Windows during this early phase. Development under Faber continued into the mid-2000s. In 2006, the project transitioned to new maintainer Georgy Berdyshev.

Transition to Georgy Berdyshev

In January 2006, Albert L. Faber announced on the CDex homepage that he was seeking a new project manager and developer to assume responsibility for the software, signaling his departure from active development. In June 2006, Georgy Berdyshev took over as maintainer and released version 1.70 Beta 1 on June 5, marking the resumption of development after a multi-year hiatus. Subsequent contributions included Ariane Gomes (known online as arianepaola) joining as a developer in 2008. In 2007, the project license was updated to the on June 30, shortly after its . The project later shifted hosting from to an independent domain at cdex.mu.

Key releases and milestones

CDex's key releases and milestones primarily occurred after the transition to maintainer Georgy Berdyshev in 2006. The revival began with version 1.70 Beta 1, released on June 5, 2006, via , marking the first major update in several years. The 1.70 series (2006–2014) delivered ongoing improvements, including the introduction of native encoding in version 1.70 Beta 2 and the addition of support, culminating in the 1.70 final release on June 29, 2014, which provided dedicated and Multibyte builds alongside bug fixes and encoder updates. Intermediate versions in the 1.70 and subsequent lines (such as 1.71 through 1.77) added features like full creation, updated encoders (e.g., with compression improvements), enhanced handling, and genre list expansions with ID3 tag fixes. The project page was shut down in July 2015, with the last available source code from earlier 1.70 betas. Later milestones included version 1.96 in November 2017, which addressed Windows 10 library compatibility issues among other fixes. The final stable release, version 2.24, arrived on August 12, 2020, incorporating fixes for and additional bug resolutions; it remains the latest version available in both and Multibyte variants. By mid-2020, the default freedb database service became inaccessible, limiting automated metadata retrieval for .

Features

Audio extraction capabilities

CDex extracts directly from compact discs (CDs) using () , reading tracks from the disc and saving them primarily as , with options for simultaneous encoding to other formats during the process. It incorporates the cdparanoia ripping library for advanced jitter correction and robust error handling, helping to ensure accurate extraction even with imperfect drives or scratched media. CDex offers configurable ripping modes through cdparanoia, with the full paranoia mode recommended by default for thorough to maximize . The software supports reading information when the disc and drive provide it, allowing automatic retrieval of track titles, artist names, and other details during . It enables multi-track ripping, permitting users to extract multiple or all from a in a single operation, with displayed for each track.

Supported formats and encoders

CDex supports a wide array of and , allowing users to directly to or , as well as convert existing between . The software outputs to natively or compresses audio on-the-fly using built-in and external encoders. Among the primary supported formats are (via the WAV output encoder), MP3 (primarily through the ), (using the with and ), (via the for ), Monkey's Audio APE (using the Monkey's Audio encoder), and (via the or ). Additional encoders include support for (through options such as FAAC, Astrid/Quartex, or Psytel), (internal MP2 encoder), TwinVQ VQF (via Yamaha or NTT VQF encoders), and Musepack (external Musepack encoder). External encoders like Xing for MP3 are also accommodated, while some formats require specific setup. Users can configure encoder parameters to adjust settings such as , quality, and compression level, depending on the selected encoder. CDex further enables conversion of existing to compressed formats or vice versa, supporting of audio files independent of CD extraction.

Metadata and database integration

CDex integrates with online CD databases to automatically retrieve metadata such as artist names, album titles, and track information for audio CDs. It originally supported the () service for querying local or remote databases to populate track details. Following the original FreeDB's inaccessibility in 2020, users have configured CDex to use the community-maintained alternative gnudb.org by setting the server to gnudb.gnudb.org (typically on port 80 for HTTP or 8880 for CDDBP) and providing required parameters including a user email, application name, and version. The software also supports , allowing metadata embedded directly on compatible to be read and used for track information, provided the CD drive supports the feature. CDex enables customizable file naming templates using placeholders that incorporate retrieved metadata into file and . Common placeholders include codes for artist name, album name, track number (often with leading zeros), and track title, facilitating organized output such as artist/album/track number-track title . Users can define these formats in the settings to control sorting and naming conventions. Metadata retrieved from databases or can be manually edited within the application before processing, with support for automatic insertion of ID3v1 or ID3v2 tags into the resulting audio files.

User interface and configuration

CDex presents a straightforward designed for ease of use in tasks. The main window displays CD track listings with options to select individual or multiple tracks for , along with buttons for initiating extraction and accessing configuration settings. The program offers extensive configuration options accessible through an Options menu, allowing users to customize ripping parameters such as jitter correction based on the cd-paranoia library and audio normalization, as well as encoding preferences including selection among supported encoders like , , and . Additional settings control output file naming formats, destination directories, and integration with external tools or databases. CDex supports multiple languages in its interface. Users can download separate language files, place them in the program folder, and select the desired language from the Options > Language menu upon restarting the application. During operation, the interface provides progress monitoring by indicating track progress and jitter control status in real time as proceeds. The software enables creation of and PLS playlist files from and supports direct recording of multiple tracks simultaneously, facilitating for efficient handling of entire .

Security and adware concerns

Adware bundling in installers

The CDex installer began including the module with versions in the 1.7x series, such as version 1.79. functions as a software bundler that presents offers for additional third-party programs during the installation process. These offers typically feature for sponsored software, requiring users to manually opt out to avoid installation, with limited upfront disclosure about the bundled content or its potential effects on system settings and browsing experience. The CDex installer has employed such practices, including automatic selections and less prominent options for these additional programs, which users could overlook during setup.

Malware reports and detections

CDex has been flagged by several antivirus programs as containing , particularly in its installers from the mid-2010s onward. Malwarebytes has detected the CDex installer in versions such as 2.15 as Adware.Fusioncore, attributing this to the use of the Fusioncore install wrapper that bundles additional software depending on . Malwarebytes staff confirmed this detection as legitimate, noting that while the core CDex program itself is considered safe, the installer poses the risk of unwanted bundling. Users have been advised to temporarily disable protection during installation and carefully decline optional offers. User reports on forums including Reddit, , , and MajorGeeks have described similar detections since at least 2017, with installers or downloaded files flagged by , Microsoft Defender, and multiple engines on as PUP.Optional.InstallCore or related /bundler variants. Some users reported actual infections or unwanted software installations after downloading from official or third-party sites, though many instances appear tied to bundled installers rather than the application itself. VirusTotal analyses of certain CDex executables, such as versions around 2.06 and later, have shown detections for adware components. These issues have led some communities to recommend avoiding recent versions or seeking older, pre- releases, with discussions continuing into the early 2020s about ongoing flags in installers up to at least version 2.24.

Source code absence and transparency issues

CDex was originally released under the (), with publicly available to allow community review and modification. The official license on the CDex website confirms use of , which mandates that distributors provide the when distributing binaries, either directly or via a . However, releases stopped after version 1.70 Beta 2, with the last available source corresponding to that version and accessible via an or direct download as documented on the official site. No has been released for subsequent versions, including recent releases such as 2.24 in 2020, despite the software remaining distributed as . This shift from to effectively closed-source distribution, while still claiming on the official website, has created significant . Users and the community cannot independently audit recent to verify their , modifications, or absence of unwanted changes, eroding trust in the software. The access instructions remain on the site but lead to outdated content limited to version 1.70, with no evidence of updates or active maintenance for the repository. These factors have fueled community distrust, as the unauditable nature of current binaries contrasts sharply with the of openness and verifiability.

Current status and reception

Availability and download sources

CDex is primarily available for download from its official website at cdex.mu, which serves as the main distribution platform since the project's shift away from . The latest and final version is CDex 2.24, released on August 12, 2020, available as a and Multibyte installer recommended for Windows 10/8/7/Vista/XP. The download page also provides , such as CDex Portable 1.77 ( and Multibyte variants), which require no installation and can run from USB or , along with supplementary files like language packs and required if missing from the system. While the official site remains the primary source, CDex executables and portable packages appear on third-party repositories and , including and (via mirrors for portable variants). Some download sites display warnings about potential security risks associated with installing CDex, particularly older or non-official copies.

User community and alternatives

CDex achieved significant popularity in the early 2000s as one of the most widely used for Microsoft Windows. It was valued for its straightforward interface, support for multiple output formats (including MP3, , and ), and integration with online CD databases like freedb and . By July 2010, it had accumulated over 41 million downloads on , ranking as the 14th most downloaded project on the platform at that time. The official site later claimed more than 80 million total downloads, reflecting its broad adoption among Windows users seeking an accessible tool for audio extraction and format conversion. In audio enthusiast communities, such as those centered around HydrogenAudio, CDex was long recognized as a simple and capable GUI-based with features like , , and transcoding. However, it has generally been viewed as less robust than specialized tools for accurate, error-free . Following the introduction of (such as ) starting around version 1.70 and persistent concerns about security risks in later releases, user sentiment has shifted significantly. Many in the audio community have recommended switching to alternatives, with frequently cited as the preferred choice for its advanced error detection, AccurateRip verification, and log generation capabilities. Other commonly mentioned alternatives include dBpoweramp, CUERipper, and foobar2000 with its CD ripping components. CDex retains a legacy as an influential early that helped popularize digital audio extraction and format conversion for non-technical users in the early digital music era, even as its active user base has largely moved to more trusted modern options.

References

Add your contribution
Related Hubs
User Avatar
No comments yet.