Create a Standard user account after the default Admin one. Use that. Use EMET on max settings. Try to use whitelists if possible (AppLocker). Relevant post:

Create a Standard user account after the default Admin one. Use that. Use EMET on max settings. Try to use whitelists if possible (AppLocker). Relevant post: https://community.spiceworks.com/how_to/59664-free-almost-perfect-malware-protection-with-gpo-app-locker https://community.spiceworks.com/how_to/59664-free-almost-pe... I would use Avira over Microsoft's default antivirus. Use Malwarebytes. Always stay up to date. You can try GlassWire as well for easy monitoring of your traffic: https://www.glasswire.com/ https://www.glasswire.com/ Use Chrome (most secure for now) - uBlock Origin, WOT, HTTPS Everywhere extensions. Windows 10 should be much better security wise, especially if you only stick to store applications, but I think it will include some security features for older programs, too (app signing, I think some virtualization/isolation stuff, etc). In about a year laptops with fingerprint authentication should come out, too. Unfortunately you'll still have to get the Pro version to get Bitlocker (or you can use one of the Truecrypt forks like Veracrypt).