BlackIce is a good all around firewall, but you'll have to use it along with a trojan detection prog (e.g. the cleaner) or use some other means of denying access to specific ports (1243, 27374, etc...) commonly used by trojans. I have personally seen that familiar blue eye in the systray of systems I've used sub7 against (I know, I'm just a script kiddie ).