I only manage to avoid Trojans because I know a large number of valid domain names such as adobe.com; still the links must be analysed very carefully to locate the DOMAIN name at the left of a messy string of characters. Then you have to trust your  anti-virus software.
Why do people fall for Trojans? | ZDNet:
Suppose that the link was:
https: //store.adobe1.com/cfusion/…
Change one character and this is now a non-legitimate url. How on EARTH would you expect your mother/grandmother, etc. to notice this subtle change… This is why social engineering works and was the point behind the article. It is time to blame the criminals and look to a more comprehensive solution rather than assuming that everyone that falls prey is an idiot. My 2 cents."