So far Comodo seems really awesome. It has a sandbox which makes a "fake" Windows and copies the malicious things there to find out what they are. It also has a firewall with it.

It tells you what's coming in, what it's doing, where it's going, and what it might be capable of. It's really impressive for freeware!

Also from what I've heard, they update their definitions every day.