It doesn't help that the real download link is usually tiny and hard to see, while the fake ones are big, prominent, and increasingly appear more and more like the legit thing. Even if you're careful, you're probably going to make a mistake sooner or later and click on the bad one. Whoever made those sites should be shot.
Um turn on Ask where to save each file before downloading if you have chrome. It will tell you what you are downloading and let you cancel it before it starts.
In other news RA2 is on CNCnet5. Yay !(you can still use xwis)