Because running a shell script in Linux just isn't easy enough for some folks, I put together a mini how-to on setting up a Windows XP box as a rogue AP to snarf usernames and passwords (or worse) from people at hotspots, etc.
http://airsnarf.shmoo.com/airsnarf4win.html
The basic gist is: SoftAP + TreeWalk DNS + Apache + manual local DNS cache poisoning = Airsnarf for Windows
Perhaps now the fucking reporters will stop calling "Evil Twin" access points a technique used by "sophisticated hackers".
Enjoy.
Sincerely,
Beetle