End of list. Don't disable JS, you can be admin if you want, you can use AVG, which is free (don't have it resident, just scan anything you download or are given by somebody else via commandline or AVGCC), and you don't need host files to ban certain domains.