File links frequently bundle media players or codec updates that function as spyware or background adware.