Most infections happen because a system is outdated, a download is risky, or an account is over-privileged. Antivirus helps, but a baseline setup prevents many problems before scanning even matters. This guide focuses on the highest-impact steps.
1) Update first (the boring step that saves you)
Run OS updates and reboot. Then update browsers and any tools you use for downloads. Many exploits target old browser engines and plugins.
2) Turn on built-in protections and keep them on
- Real-time protection: do not disable it for convenience.
- Cloud-delivered protection: improves response to new threats.
- Tamper protection: helps prevent malware from turning defenses off.
- Firewall: keep it enabled on all networks.
3) Use a standard account for daily work
If you browse and install software as an admin account, a mistake has a larger blast radius. Use a standard user account for daily activity and elevate only when needed.
4) Harden your browser (where most attacks start)
- Keep one main browser and remove unused ones.
- Use a password manager and turn on 2FA for email.
- Block third-party cookies where possible.
- Be careful with extensions: install fewer, keep them updated.
5) Download rules that prevent regret
- Avoid cracked software and unofficial installers.
- Prefer vendor sites over download portals.
- If you must run unknown files: use a sandbox or a spare device.
- Do not ignore browser warnings for convenience.
6) Backups are part of security
Ransomware is a business model. A backup that is not always connected is often the difference between a bad day and a total wipe.
