I think Softpedia and FileHippo are the only big sites left not doing this ridiculous practice. I'm debating whether or not to pull the application listing. What do you guys think?
[1]: http://download.cnet.com/EasyBCD/3000-2094_4-10556865.html
EDIT
The benefit of our freeware not being open source is that we retain full control over distribution and packaging. Unlike nmap and others, we actually have a legal right to demand that CNet, et. al. either host the unaltered EXE or pull their listing.
I have just sent CNet a "cease and desist"-ish open letter, which we've also published on our blog. We will be forwarding this to any and all download sites we find bundling EasyBCD with their intrusive downloaders and installers, as that goes explicitly against the products' licensing agreements, which are there to prevent exactly this type of behavior.
Link: http://neosmart.net/blog/2011/open-letter-to-cnet/
tl;dr of link: C&D bundling of EasyBCD with installers and downloaders or pull the listing.