On top of having a firewall, anti-virus, spybot etc.. we keep our ports closed and have cookies turned to an "ask me" always situation. We don't ever use a "downloader" nor do we ever auto-install anything. If we do download something from the "net" that is in zip format, we scan it first before extraction. Anything we are unsure of we rename into a text file where possible for analysis or delete it altogether. As for MP3's, the only ones I download are those the artists sanction themselves. Much safer that way. Also, if I get an email from an add or person I do not know (on those accounts I don't have address blocks on) I don't even read it. It goes straight to "delete" then "empty deleted items folder". All scripting, active x etc. is disabled - both in email and in browser.