[x-post snipped]

SW wrote:

As well as seconding °Mike°'s advice; for IE users, I'd recommend a
"custom" security setting.
(Internet Options > "Security" tab

ActiveX controls and plug-ins : "Prompt"
Installation of desktop items: "Prompt"
Navigate sub-frames across different domains: "Prompt"
Active Scripting: "Disable" (at least until the latest, and current
vulnerability is addressed)
--
"I'd also reconsider cross-posting to troll-infested cesspools like
alt.os.windows-xp. Not for 'security'. It's just annoying."