I agree that for most AV+FW is probably the best compromise. I ran both between 1996 and 2006 and then began to wonder what was going on as I never found anything more threatening than cookies or false positives. If you found 70 nasties in 4 months then I can see why you run protection. In a sense I don't really run without an AV - my mail is checked before delivery and new programs are only installed on test machines before deployment. Every few weeks I load one of the many free programs and check, find nothing, reboot and get back to work.