Firefox with NoScript extension.
I know it can be a pain to use, but helps in javascript trojans.
Also running XP as a non admin. In XP home using a limited user account.
I don't mess much with any security progs cause I have an overheating CPU
So I don't run spybot resident or any other IDS like software.