"(remember, even a bog-standard firewall or real-time virus monitor will prevent such software being installed remotely)."
Antivirus software doesn't detect trojans. Anti- trojan software is trojan specific.
Software firewalls - even really expensive ones, but especially Macafee or Zonealarm only keep out script kiddies and robots.