Hi,
3. don't trust anyone or anything fully because nothing is perfect and people lie or just don't know.
Just true !
By the way, I'd say that there's no "best protection" when you're talking about viruses, trojans ... cause they "change" too much.
It's getting difficult to have a really good "black list", and we must count on other abilities of software (e.g.: heuristic detection, HIPS).
The main solution I found is to be on the Net with a securised explorator (e.g.: Mozilla Firefox + NoScript + AdblockPlus + CookieSafe plug-in), a firewall, and an antivirus guard up-to-date. I think (only my point of view), that an AntiSpyware is not required if you don't click everywhere.
Good night everyone !