Malware is the bane of the Internet. Seriously, few things on the web
are as dangerous as contracting malware, and few things are as
time-consuming as
the process of malware removal. Avoid at all cost.
But here’s the thing about malware: It’s not enough to
install a top-notch security suite. You’ll have to
change your bad security habits and start
doing what the experts do.
And if there’s one habit that you must kill as soon as possible, it’s
the carefree downloading of software from any and all sites.
Today, free software download sites are one of the most common sources
of bloatware and even malware.
1. CNET Download
Go around and ask people what they think of CNET Download — the site
formerly known as Download.com — and most of them will probably tell you
to stay away. You should heed that advice if you know what’s good for
you.
CNET Download has been around since 1996, making it 20 years old at
the time of this writing. It used to be the most popular download
destination on the web, but in those two decades, the site has really
gone downhill.

In 2011, the site introduced a download manager program called CNET
TechTracker that was allegedly full of toolbars and bloatware, which was
so bad that it was eventually flagged by security suites. Then in 2015,
malware was found to be bundled with their installer files.
Can you download files safely from CNET Download? Yes, you can, but
it’s risky. Few people trust CNET Download anymore and using the site is
akin to crossing a minefield. Your next step could be your last.
2. Tucows
Tucows is another free download site in the vein of CNET Download.
What’s funny is that Tucows is actually older than CNET Download — by
about three years. Started in 1993, Tucows is one of the oldest download
sites in the world.
In 2008, Tucows announced that they would be shifting focus away from
software downloads to diversify their business. It would go on to
launch the
Ting mobile service network, among other business ventures.

Since shifting focus, Tucows has been involved in a few malware-related incidents. For example, in 2010,
it served malvertisements to visitors. And in 2015, Emsisoft found that Tucows
served the most potentially unwanted programs with its downloads.
We recommend staying away. There are better sites out there with more up-to-date repositories and less malware to worry about.
3. Softonic
Not to be confused with Softpedia, which is mostly reputable for what
it is, Softonic is another ancient download site that has been around
for a long time — since 1997 — and it’s actually foreign, based in
Spain.
Starting in 2009, Softonic spearheaded several different distribution
models, including the Softonic Toolbar and the Softonic Downloader.
Even when users opted out, they were blasted with these kinds of
unwanted programs, which is why Softonic has such a poor reputation now.

In 2015, the co-founder of CNET Download became the new CEO of
Softonic. The Toolbar and Downloader were immediately dismantled and the
site promised to dedicate itself to clean and safe software, but it’s
still too early to tell.
Considering how poorly CNET Download has performed in terms of
delivering clean and safe software, we recommend treating Softonic with
similar caution and avoiding it until the site proves itself and walks
the talk.
5. Public Torrent Trackers
Despite what a lot of people think, torrenting itself isn’t actually illegal. Indeed,
there are plenty of legal torrents out there and they’re all valid and legitimate. But let’s be real: if you torrent, you’re probably doing it illegally.
We don’t condone the practice, but if you
are going to download torrents, heed this warning.
Public torrent tracker sites like ThePirateBay may contain malware.

For example,
malvertising is a big concern
where advertisements are used to distribute malware. Malware can also
exist inside fake torrent downloads. If you download a movie and it says
you need to install a special video codec, that “codec” is probably
malware.
According to a 2015 study, users are 28 times more likely to contract malware from torrent sites than mainstream websites.
Long story short, torrents are risky. The risk goes down
if you switch to using private torrent trackers but even those can be dangerous, if you aren’t careful.
5. File Hosting Services
Piracy exists in many forms. Torrenting is the most controversial and public form, of course, but file hosting sites make up a huge chunk of the piracy realm.
Remember the now-defunct MegaUpload? Yeah, those sites.
Like torrent sites, file hosting sites are prone to malvertising
attacks and downloads that contain malware, but they also have a third
form of malware distribution:
the fake download button.

We’ve all seen it before. You search for a pirated copy of a book or
music album, for example, and arrive at a site like Turbobit or
HugeFiles — only to see DOWNLOAD HERE all over the place. Here’s a good
rule of thumb:
The bigger the download button, the faker it is.
We’ve written before on
how to spot and avoid fake download buttons
but these tricksters are constantly evolving and getting more deceptive.
The only foolproof way to protect yourself is to avoid file hosting sites altogether.
6. Warez Exchange Forums
This one is sort of a corollary to the point directly above, but you
should avoid warez sites as much as you can. For those who don’t know,
warez are a form of piracy that mainly involves cracked software.

Warez are usually exchanged within a community, though these
communities can be publicly accessible through search engines. Most
often, warez exchanges exist as forums but use various file
hosting services for the actual sharing.
The threats are the same here: malvertising, fake warez, and infected warez downloads.
7. The Windows Store
There are so many reasons not to use the Windows Store. The
lack of many important and popular apps is a huge downside, but there’s also a
plethora of dead and abandoned apps that simply don’t work anymore.
But most of all, it seems as if the Windows Store isn’t as impervious to malware as once hoped.

The two biggest selling points of the Windows Store are:
one, it’s highly regulated to filter out scamware and malware, and
two, apps run in a sandbox to prevent them from gaining access to system files and processes.
Well, we’ve known for a while that the Windows Store
is full of scamware and deceptive apps, but the sandbox aspect has been pretty good… up until now, at least.
Not long ago, ZDNet discovered a Windows Store app that
used an in-app advertisement to download unwanted software.
Microsoft is doing its best to solve this security hole, but for now,
you may want to avoid downloading anything from the Windows Store.
Which Download Sites Do You Avoid?
This isn’t a comprehensive list, but it’s an important starting point. Too many sites out there can deliver
malicious trojans and worms to your computer and it’s your duty to be wary and vigilant. You can turn to the
safest software download sites, but they’re not perfect, either. Do remain cautious!
What should you do when you discover malware on your system? Follow our
step-by-step guide to fighting a malware infection.