Free for and software for windows

SpoofStick is a simple and useful browser extension that allows users to detect spoofed (fake) websites.
A spoofed website is typically made to look like a well known, branded site (like ebay.com or citibank.com) with a slightly different or confusing URL.
The attacker then tries to trick people into going to the spoofed site by sending out fake email messages or posting links in public places -hoping that some percentage of users wont notice the incorrect URL and give away important information.This practice is sometimes known as "phishing".
SpoofStick makes it easier to spot a spoofed website by prominently displaying only the most relevant domain information.
You can customize the color and size of the SpoofStick display to suit your tastes and make it harder for a fake site to try to "spoof" SpoofStick with a static graphic.

System requirements:
- Internet Explorer
-

Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.
Troj/RKProc-Fam is a family of kernel-mode driver rootkits.
Members of Troj/RKProc-Fam are capable of hiding information about certain running processes, providing stealthing by patching the kernel service descriptor table.
Troj/Stinx-E is a backdoor Trojan for the Windows platform.
Troj/Stinx-E connects to one of several IP addresses and runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.
When first run Troj/Stinx-E copies itself to $sys$drv.exe.
Troj/Stinx-E can be instructed to delete, execute, and download and execute files. Troj/Stinx-E is a backdoor Trojan for the Windows platform.
Troj/Stinx-E connects to one of several IP addresses and runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.
When first run Troj/Stinx-E copies itself to $sys$drv.exe.
Troj/Stinx-E can be instructed to delete, execute, and download and execute files.
Troj/Stinx-E will attempt to circumvent the Windows Firewall if it is present by adding itself to the list of allowed programs.
Troj/Stinx-E may be stealthed on an infected system by exploiting Sony DRM (Digital Rights Management) software.
Troj/Stinx-E creates a Mutex variable named "SonyEnabled".
Troj/Stinx-E may arrive as an email attachment wherein it is claimed that the attached file is a photograph to be published that requires approval.
Troj/Stinx-F is a backdoor Trojan for the Windows platform.
Troj/Stinx-F connects to one of several IP addresses and runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.
Troj/Stinx-F can be instructed to delete, download and execute files.
Troj/Stinx-F will attempt to circumvent the Windows Firewall if it is present by adding itself to the list of allowed programs.
Troj/Stinx-F may be stealthed on an infected system by exploiting Sony DRM (Digital Rights Management) software.
Troj/Stinx-F may arrive as an email attachment wherein it is claimed that the attached file is a photograph to be published that requires approval. Troj/Stinx-F is a backdoor Trojan for the Windows platform.
Troj/Stinx-F connects to one of several IP addresses and runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.
When first run Troj/Stinx-F copies itself to $sys$xp.exe, and creates the following registry entry so it is automatically run when an infected computer starts:
HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun
$sys$cmp
$sys$xp.exe
HKCUSoftwareMicrosoftWindowsCurrentVersionRun
$sys$cmp
$sys$xp.exe
Troj/Stinx-F can be instructed to delete, and download and execute files.
Troj/Stinx-F will attempt to circumvent the Windows Firewall if it is present by adding itself to the list of allowed programs.
Troj/Stinx-F may be stealthed on an infected system by exploiting Sony DRM (Digital Rights Management) software.
Troj/Stinx-F may arrive as an email attachment wherein it is claimed that the attached file is a photograph to be published that requires approval.
Troj/RKProc-Fam and Troj/Stinx can be removed from Windows computers automatically with the following Resolve tools:
Windows disinfector
RKPRFGUI is a disinfector for standalone Windows computers. To use it you have to do the following:
- Open RKPRFGUI.com file from your desktop after downloading it.
- Click on the Start Scan Button.
- Wait for the process to complete.
Command line disinfector
RKPRFSFX.EXE is a self-extracting archive containing RKPRFCLI, a Resolve command line disinfector for use by system administrators on Windows networks.

Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.
W32/Esbot-B is a network worm and IRC backdoor Trojan for the Windows platform.
W32/Esbot-B will connect to an IRC channel and wait for instructions. W32/Esbot-B is a network worm and IRC backdoor Trojan for the Windows platform.
W32/Esbot-B will connect to an IRC channel and wait for instructions.
When first run W32/Esbot-B copies itself to services32.exe.
The file services32.exe is registered as a new system driver service named "Content List Management Sub System", with a display name of "services32" and a startup type of automatic, so that it is started automatically during system startup. Registry entries are created under:
HKLMSYSTEMCurrentControlSetServicesContent List Management Sub System
The following registry entry is set:
HKLMSOFTWAREMicrosoftWindowsCurrentVersionShell Extensions
Melt
Troj/Rootkit-AA is a kernel-mode driver that is capable of hiding processes by directly manipulating kernel structures.
W32/Esbot and Troj/Rootkit-AA can be removed from Windows computers automatically with the following Resolve tools:
Windows disinfector
ESBOTGUI is a disinfector for standalone Windows computers. To use it you have to do the following:
- Open ESBOTGUI.com file from your desktop after downloading it.
- Click on the Start Scan Button.
- Wait for the process to complete.
- After removing the worm you should install the Microsoft security patches, as described in the W32/Esbot removal tool Readme.
Command line disinfector
ESBOTSFX.EXE is a self-extracting archive containing ESBOTCLI, a Resolve command line disinfector for use by system administrators on Windows networks.