For WinMerge it should be noted that some web-sites out-there offer winmerge binaries for download and I bet that some of them are bundled with spyware (they are not affiliated with the official version, but even my tech-savvy friend was about to download winmerge the other day from a non official source, I noticed him that he should use winmerge.org).