CNet wraps downloads in their own
spyware-laden installer. I would not download anything from them if I can get it elsewhere. In calibre's case, just follow the link from the app itself, or from the calibre web page. That way you'll always get the right file without any other crap.