What secure Internet browsing pattern should I choose for Windows 7?

Question

Malware

Good evening everyone! The question is long overdue. I work on the Windows 7 operating system, while actively using this software (often simultaneously): four browsers, Photoshop, Sony Vegas, audio and video processing software, as well as Word Office and Excel. Everything works fine, but since 90% of all viruses are written specifically for Windows, the security issue is constantly worrying. Most of all I am afraid of losing personal data stored on an external HDD, which is constantly connected to the computer for work. Node 32 is installed. I store passwords for all accounts, hostings and other things in KeePassX, but the entire archive of my files is in the clear.
Please advise any security options. For example, I'm afraid that business competitors may attack my computer and send some keylogger that counts all keystrokes along with passwords, or take screenshots from the screen and poison its owner. Can I somehow secure my files on HHD?
The first thing that comes to mind is to create a regular user account and surf the Internet through it. And store personal files in the C:\Users\Admin administrator folder, which, of course, a normal (working) user will not have access to. And so that some virus could not pull out the data, then do not go online from the administrator account (only update the antivirus program once a week). If, I understand correctly, then viruses that have entered the computer through a regular user account will not be able to register in the system registry (please correct).
You can also raise a virtual machine in a regular user account and install Windows 7 on it, from which you can continue working on the Internet. Only now I'm afraid that the speed of the programs will drop dramatically and there will be a lot of computer resources every day, the processor will be constantly at the limit. In general, please tell me some safe scheme for working on the Internet with the ability to access your personal files and passwords, and at the same time they are not afraid that someone can steal, copy, or damage them.

Answer 1

1) Use a virtual machine with Linux for surfing.
2) install software, only from off site.
3) do not use flash drives (they are even more dangerous)
4) Windows updates and antivirus.
5) backups - a must.
By the way, I do not rule out that the system is already infected with something, for example, Zeus.
In 2010, a reward of several thousand euros was awarded for my VK profile.
Then I was still on Windows.
Attempts at social engineering was dofiga.
But everything is fine. Although it taught me to take security more responsibly.

Answer 2

Do not download or run any program from the left sites, from the left letters, and from friends.
In general, try not to climb on the left sites, especially if they offer to launch something.
If you need software:
For free software, do not be too lazy to climb not into the first Google link, but to clarify that this is the official site of this software, and that the software does not contain any greetings from mail.ru and other similar installers.
For broken software - use proven torrents, where registration is required and a specific torrent has been downloaded and tested by dozens of people.
These simple rules are enough to be 99% sure of the reliability of protection, even if you do not have any antivirus at all.
A vulnerability in the OS and the programs used is of course possible, but in principle an attack on you is unlikely. If you really need to check some software - virtualbox, make a backup of the configured virtual machine, if you need to roll back, and run it there.

Answer 3

Guys, why, when it comes to keyloggers, a person is immediately labeled paranoid, as if keyloggers do not exist at all. Three years ago, I somehow experimented with them myself, uploaded them to my friends on the computer, and then showed them. I don't have 100% confidence in the Nod 32 antivirus, and even more so in the "leaky" Windows system. I can't switch to Linux, because all my software is based on Windows. And I observe hygiene and don’t wander around the garbage dumps, but I’m afraid that somehow they can throw me a Trojan - there are reasons for that (is a Trojan or a keylogger a rare case?).

Answer 4

at least you need to switch from nod32 to another casper or doctorweb antivirus, practice showed they are still more cheerful.

Answer 5

This is paranoia.
1. Use a standard user account
2. Increase the security level in the account control. records. In fact, notifications will pop up more often.
4. And follow the banal hygiene products. Do not install any unknown dregs, do not climb in the garbage heaps.
5. You can encrypt anything in the file system and decrypt it only when needed.

Answer 6

raise a virtual machine in a regular user account and install Windows 7 on it, from which you can continue working on the Internet

exactly