Hi Spiritsongs,
It would be more welcome to tell us why you would NOT like to recommend TF. What are your main concerns here? I have found out that for instance it can overreact to a normal program doing something out of the ordinary, like TDIMON starting a driver, TF killed User32.dll with a series of zero bits, also making I could no longer use both Fx and SRWare's Iron browsers, only could go online using an explorer shell browser.
I after that incident had to perform a restart of the OS to get a functional browser back. Why cannot I allow such an action like I allow something through a firewall for instance. I did not try this out, but it could well be that TF is not so friendly upon opening up certain malware fighting tools like ComboScript for instance or other programs that are considered so-called "risktools",
polonus