Well, I just put Windows Defender on and ran SpyCar against it. Yes, it does what it is supposed to do. It holds the activity until you get a chance to approve or disapprove it. The trick is testing the IE stuff. I'm having problems since the Black Tuesday patch getting IE to go anywhere reliably. I may have to get the IE7 beta.