Your website shows that a hacker can hack into a windows xp machine, and I agree with that. But that doesn't mean that there is a virus floating around that can exploit those weaknesses on their own. The sobig and blaster viruses have done this, but they came after the security patch that protects against them. My claim is that there is no virus out right now capable of spreading to computers that have all security patches. Someone could write a virus tomorrow that exploits remaining vulnerabilities, but I'm saying there isn't a virus like that today.
The default security settings on internet explorer do fine to at least ask you if you want to install a trojan or spyware. You at least have to click "yes". I've never seen or heard of any spyware or trojans that can bypass the dialog box asking the user if he wants to install the program. Other free browsers are more secure, and will simply not ask you if you want to install spyware, and prevent it from entering your computer.
If you want to protect against the next blaster virus that may one day come out, I suggest a free firewall such as zone alarm. Make sure you aren't just using a blanket firewall, but one that allows you to open or close ports at your own leisure. But to spend money on antivirus and security software is wasteful. Smart computing and free downloads are all that's needed to secure your computer.

