Though my ISP I subscribe to McAfee Scurity Center. I use MaAFee's Perosnal Firewall and VirusScan. One of my friends thinks I am mad to do so because he thinks a freeware anit-virus program and freeware firewall would do a good enough job for me. Is this so?

McAfee Security Center didn't stop my computer from being flooded with spyware but I think this is because my intellectual disabled son probably granted the spyware program access to my computer when McAfee asked if access should be granted.

There are several very good, free Anti-virus and firewalls available that will be every bit as effective as is McAfeeSC:

http://www.bleepingcomputer.com/forums/topic3616.html

I am not very partial to all-in-one security services for several reasons. First, the interface and programmes are usually bloated. Second, because the various parts are often pasted together by buying out other companies, the modules are often uneven in quality.
Spyware protection almost requires using several applications, because each company has slightly different critieria that it looks for when it scans your computer's hard drive.

Lastly, you are correct to assume that most malware requires user action to get into a computer. Encourage your son to always research any application (or source) before trusting it to be malware-free, or to discuss the download with you before he presses the magic button. Some versions of Windows allow different levels by user; consider changing his status.

Regards,
John