A very simple way to reduce your vulnerability in Windows is to use a limited user account (which basically Linux has). As Windows sets accounts to administrator as standard, you are more at risk as you have complete access to all areas of the OS (nearly)
Have no real AV favourite, apart from I would not use Norton again - or McAfee