Downloading pre-compressed ROMs from random sites is risky (pop-ups, malicious ads, fake EXE files). The safest method is to from verified Redump.org disc images.