I prefer Agnitum Outpost by far to all other software firewalls for WinMachines... It needs a bit more configuration then ZoneAlarm to get working but it is much more configurable... Most firewall companies do not recommand using 2 concurrent firewalls, I have used 2 at the same time without any problem... But I think that with a configurable firewall you don't really need 2. All you have to do is block all ports that you do not use. A list of dangerous ports and their common uses can be found at http://www.iss.net/security_center/a...xploits/Ports/

I also suggest having an UPDATED antivirus running, that way if a trojan was installed via physical access to your machine, it will be discovered IF you have a the Resident scanner running. I also suggest using the updater for the AV you pick, a new trojan could be written anytime and your old definition file would be useless to locate it (unless you have heuristic scan selected and the trojan is not outstandingly different then existing trojans...)

Have fun!