Our survey produced some hopeful signs that online security is slowly improving. For example, the rate of serious spyware problems has declined 54 percent and serious virus problems 32 percent over the years that we've tracked them.

In our first comparison of consumer experiences using Windows Vista vs. other versions of Windows, Vista users were significantly less likely to report a spyware infection and less likely to report a virus infection than other Windows users. One of Vista's main selling points was enhanced security.

However, given all the factors that can improve computer security, including strictly following safe practices, such differences may well have occurred for reasons besides Vista's enhanced security.

As in our past surveys, very few Macintosh users reported so much as a single virus or spyware infection.

Government continues beefing up its weapons too. The Federal Trade Commission recently updated the Can-Spam Act regulations. Under the new rules, companies can't charge fees or require more personal information than an e-mail address for a consumer to opt out of e-mail distributions. But the commission won't reduce the 10-day period that e-mailers have to honor opt-out requests.

Two security-related bills are in committee in the Senate. The Counter Spy Act prohibits installing software to turn a computer into a zombie (a PC that can be controlled remotely) or changing browser settings without a user's consent. The Identity Theft Enforcement and Restitution Act makes it easier for federal authorities to prosecute ID theft and provide restitution for victims.