spyware strikes again, can it be stopped

Hello,

Today one of my users became infected with rs32net.exe a trojan dropper
spyware program. What is very frustrating is that my network and the cpu
have up to date virus / spyware security products from well known vendors
mcafee , symantec.

This one seems to operate similar to Windows Antivirus 2008 and 2009 , big
system warning message in the task bar that looks legit and if you click it,
your sunk and it seems to damage system restore points so you can't roll back
to a previous day. I've seen Windows antivirus 2008 and the 2009 version on
a couple of home systems and never been able to sucessfully "clean" the
machines even with all the help out there on how to do it.

It doesn't seem like these types of infections can be stopped? Can anything
be done to prevent these types of attacks. If you disable javascript, then
doesn't that break AJAX sites. Even with UAC most users will just click ok
to give elevated privligies. Are these caused by problems with IE? Does
anyone have any ideas? I've had it with these things, and if the security
companies that offer software / hardware and services that are supposed to
protect us , can't get the job done, then what do we do?