You might be able to get some info off these threads..
http://www.ozzu.com/general-discussion/best-anti-virus-software-t20246.html
http://www.ozzu.com/general-discussion/best-anti-virus-program-t21269.html
I'm still sticking with Norton. In 11 years online, I've found that a firewall is useless - at least for me personally. If you run a good anti-virus, use common sense online, and don't make yourself a target, a firewall is just going to slow you down and piss you off more than it helps you.
Personally, on the attachment front, With NAV Pro 2002, all known viruses are converted to "Norton Antivirus Removed.txt" attachments. They don't even make it to my E-Mail client.
I've setup a mail filter so that if Norton has flagged it, it gets put straight into deleted items. If I get an attachment that Norton does not recognize, I save all the attachments to a directory (rather than just opening them directly), do Norton's Live Update, just to check my definitions are good, and then scan the directory. Infected stuff gets deleted, stuff that passes is generally ok.
Remember, only .exe, .com and .msi files are actually executables. There are some other files, like .vbs, .js, and java applets that
can be executed by double clicking on them (at least, it executes another application, and then processes the file's contents, and executes code contained within), but unless you're a coder, and you know you're expecting something from a client, you can pretty much nuke all these on sight.
Zip files, JPGs, GIFs, TXT files don't execute, can't contain any executable code, and can not infect your system.
I say Zip files, because the files themselves can't do anything to you, except load up in WinZIP, WinRAR, or other archiving application, but their contents could potentiall be viruses or trojans.
If somebody ever tells you "Don't open jpgs, I got infected by a virus in a jpg" ignore them. They don't know what they're talking about. Chances are the filename was something.jpg.exe or something.jpb.vbs.
Go into Windows Explorer (same on any version of windows) go into the folder options, make sure you UNCHECK "Hide extensions for known file types". Also make sure to show all hidden & system files.