A software wrapper used by CNET supposedly tricks users into installing toolbars and Trojans instead of the actual hosted program.