I use imgburn. Yes there is malware bundled with it but if you select the right options during install you can have it without.
Example here:
http://www.jdhodges.com/blog/safe-version-imgburn-without-opencandy/
ImgBurn is brilliant, but it does indeed sadly have a potentially dodgy installer. A post on the cdrlabs forum mentioned an easy way of using it without risking any unwanted crap:
Simply use 7zip to open the installer exe file, and extract the 2 exe files and Sounds directory. The rubbish is all in the $PLUGINSDIR directory.
Bluto