Norton and McAfee have apparently become bloatware in the last few years. Kaspersky is supposed to be the 'best' for detection of threats. AVG is ok, but not as good as many of the larger operations products. MS's own anti-spyware program Windows Defender is actually pretty good for detecting many threats. (Bought of course, not developed in house, but that's normal for MS...)
And you do need to keep your OS up to date on security patches. It's not
just odd corners of the net that now host malware. Cybercrime has become organized and directed in a big way over the last few years. It's not just pranksters and lone scammers anymore. Major organized crime is finding ways to get keyloggers and form watchers and other financial spy software into many legit websites by way of third-party sources.
Google is now estimating that
one in ten websites is already infested with some sort of malware. (Oddly enough Google's own ad service is one of the vectors for that infestation... crime organizations buy advertising from Google using front corporations and then build the trojan into their ads!) So you can be infected now just by surfing major sites like Yahoo.
http://www.theregister.co.uk/2007/05...e_malware_map/
http://www.techspot.com/news/25262-g...are-laced.html