You always think this won't happen to you

[Jack Sawyer]

i kinda doubt AV detectors will do much of anything wrt protecting the comp.

What you running? Linux? Os X?

firewall, web browser, not clicking bad links, not downloading bad stuff, keeping secure pw obv, what else?

Pray to Jeebus obv.

general web savvy will help, too
also, how do you know what stuff is "bad"? malware people go to great lengths to make their links appear completely legitimate to the average joe
also, phishing seems to be a hit too, but I can't see how phising will get your PP password
it has to be some sort of undetected trojan, which (probably a variant) also hit in will's case
without knowing each of their individual setups so we can compare (running processes and the like), its impossible to say for sure
[however, in minisim's case, both his PP and Neteller accounts got compromised, so we can safely assume a third point of insertion was used (probably keeps such sensitive data in one place, and this got breached, like he described his email), so no trojan needed I THINK]