Reply #34: Great. My concern is just that some folks may think the hack itself grants

[Garbo 2004]

them immunity when the problem is more complex and the hack alone isn't effective against the rapidly increasing variants in the wild. This exploit is a real bastard. Hard to easily tell average Win users how to adequately protect their systems when there is no totally effective "fix" available. (Shush, you Mac & Linux users. ) And the variants keep on coming.

As you note an AV with good heuristics is recommended. I've used NOD with BOClean as an AT for years. Suits me. But most folks just have an AV and I think Symantec still has the largest market share and name recognition. Which is why I often recommend using BOClean in addition to an AV to catch things an AV may miss. As I noted above, BOClean is NOT a substitute for an AV.

Processguard of course is another application that folks should consider looking into. Its developers have been in the biz for years and know their stuff. They put TDS out to pasture to focus on the Processguard approach, as I recall.

And Proxo!! I've been a devoted user of The Mighty Proxomitron (LOL) for years and simply wouldn't/couldn't surf without it. There are filter config sets that are user friendly and help people over the learning curve, and that's helped many folks get into Proxo. At the BBR thread KyeU posted a filter that may help Proxo users. http://www.broadbandreports.com/forum/remark,15115819~d... . I make no claims for it myself, but I popped it in just in case.