Non-Admin user accounts and Software Restriction Policy are a couple more proactive countermeasures to consider where practical.
mechBgon | 08.26.07 - 9:36 pm | #

Not just YouTube links. They are hacking to websites too: http://www.finjan.com/MCRCblog.a...px? EntryId=1685
Caleb | 08.27.07 - 5:09 am | #

Sorry, but AV is, definitely, not enought. HIPS is the way. Mostly, sandboxes.
Ilya Rabinovioch | Homepage | 08.27.07 - 12:07 pm | #