Read an article describing that on an average, 25% of the spyware isn't handled with the tools avaiable today.

Just recompiling old viruses will fool most antiviruses... *brr*

The biggest step towards security (besides having a patched system - btw; WSUS went sharp a few days ago), is to run all Internet-facing applications (browser, Office, IM-apps etc) with lower privilegues, EVEN if you "have to" be logged on as local admin. There are several good ways of achieving this, either through local policies, or with third party tools. Have a look here if you haven't already read these articles (especially Part 2):

Browsing the Web and Reading E-mail Safely as an Administrator
Browsing the Web and Reading E-mail Safely as an Administrator, Part 2

Third party tool (freeware):
RunAsAdmin

..even though these tools are somewhat a "reversed security" approach, they do solve security problems for alot of admins (the one's who should be as well as the one's who shouldn't). In the next release of Windows, Users are finally gonna be Users by default, and not Admins.


Edited by masken (2005-06-12 05:50 PM)
_________________________
The tart is out there