Hosts should work as it is OS independent
active-x and restricted sites etc are i-e features so do not really apply
The scanner should work just fine
you need to protect i-e if it installed even for just windows update
so
OS fully patched, adobe, reader/flash/and Java/ office, etc up to date
old versions of java removed
good two way firewall like outpost, comodo etc
good antivirus
something like t-timer to alert you to changes to your os?