According to my geeks at The Tech Zone, ZoneAlarm is an excellent firewall program. I remember one of the users saying that he blocked all known Microsoft IPs, which helps to eliminate the .NET threat.
Oh and just my opinion, if you're using XP or 2000, it's best to have your disks formatted...