The winning team: Avast, Comodo Firewall Pro (a free firewall), firefox+noscript+flashblock (blocks flash animation on demand), and common sense of course.
I'm running Windows Vista in admin mode since 2 years and half, and still waiting for a virus/worm/spyware, at least something I could...