Good tips, however if you read carefully what you just wrote, then it basically means you'll have a lot more stuff to do (and headaches) than with an AntiVirus solution.

Also, you said that you've only twice encountered the 'virus problem'. But, from my experience and depending on the virus itself, once can be enough to get all your files dirty and the OS crippled. Curiously, this happened to me with a file on a USB stick I had to use.

From me, the best solution would be to install a potent and free antivirus, lika Avira. Just google and you'll probably find only positive reviews on it.

The first thing I do when setting up a new PC, with Windows or otherwise, is to use a HOSTS file that has been prepared to filter out ad servers and known malware distributors. If you search online for HOSTS file, it's one of the first sites shown (mvps.org), which shows its popularity.
If one of these days I get a proxy server to use at home I might use that as a more elegant solution but in the meantime, it's a quick and easy setup step I recommend to regular users.
Installing or using Windows for the first time while out of the network and installing Avast! prior to setting up internet access sounds sensible as well.

The title is a little misleading, as in you do use an anti-virus but one that is not installed on your machine, you just do your scans online.

Here's my basic tips:
Firewall - built in or free 3rd party.
OpenDNS - Can be configured how you like to restrict stuff.
Anti-Virus/Anti-Malware - Free Avast, Avira, AVG, MSE, etc
Patches - keep up on latest patches for the OS and applications
Backups - Backup important data.
Operator - Do not visit questionable sites, do not click on questionable links, think before acting.

Free Online Utilities:
TrendMicro HouseCall (http://housecall.trendmicro.com/)
Panda Security ActiveScan (http://www.pandasoftware.com/products/activescan)
Symantec and Norton Security Scans (http://security.symantec.com)

Free Downloads:
AVG and Spybot

All good tips.

Another is to use Spyware Blaster and Spybot-SD to immunize your system.

I haven't used an active anti-virus in years. They gum up the works and in many cases are worse than the virus itself. The one we use at work drives me crazy.

Just a minimal amount of weekly preventive maintenance (using scanners like Malwarebytes, Spy-bot, etc.), and following the list that Lighthouse posted - I've only been nailed with a virus once in the last 7 years.

The biggest deterrent is safe surfing. Don't open up suspicious e-mail attachments, don't go to suspect websites, don't use BitTorrents to steal infected music/games/software. Doesn't get much simpler than that....

@Jose: "But even when I had an antivirus on duty, it only popped up to warn me twice over the span of years, so worrying about active protection has become an unnecessary burden to me."

And I'd guess that over the years you've changed your browsing habits and, despite an increase in potential threats, are even less likely to encounter malware than ever before. I'm not ready to "go naked" yet, but I hear ya.

One of the best articles yet due to the high relevance. Thank you!

Ok, nice article, but I have to say it..

The last couple of years, there's been an increase in virii (viruses? what was the last consensus on that issue?) that use USB memory sticks for propagation.

While safe browsing habits will protect you from maybe 95% of the malware out there, there are little options for USB-stick protection.

So.. you've had no need for an antivirus in the last years? That speaks very well of your teammates. I for one, have quite a few not-too-responsible coworkers. As soon as I plug the USB stick to my machine, my AV will check for the usual suspects.

I've seen 2 pieces of malware in USB sticks this week alone.

If you still can't/don't want to pay for a full featured AV, go for one of the free alternatives. You'll see three kind of free AVs:
- Nagging free versions of the full product.
- Feature-limited versions, but otherwise nag-free.
- Developed by enthusiasts. Not top-of-the-line, but usually nag-free.

And please:
- Disable autorun for ALL media.

Cheers,
Roflo

Is this on a admin or limited user accounted system? You might better have advised "Disconnect your computer from the internet, and don't ever connect again". There are no guaranteed safe sites.

The author does not live in the real world. I think in the workplace its criminal not to have an antivirus program running to protect your system from some employee opening up some infected email or something. Its like giving advice on how not to get an std by not having sex.

I am glad someone has finally spoken up about this ... personally i havnt ever really bothered with anti virus software etc.

they key is to be a bit smart about where u browse and what u do.

i always keep my browser up to date n thats about it. infact up until windows 7 beta came out i had been using a dodgy version of winXP (i dont condone this btw) which i think had SP2 installed (at best) but no other updates etc and i never had any problems! if i did ever suspect something was up i would either check it out or do a clean format of the main drive, which was likely due anyhow!

my main theory has always been the more u worry about it the more it is likely to happen! I know ppl who scan everything, and i mean EVERYTHING, and they still get infected! I dont scan a thing and im fine! ... *touches wood*

good article

Or, yknow, you could use Linux for your browsing and downloading and general use and not worry about AV altogether.

However, when I was a WinLol user, I pretty much did this. Didn't click suspicious stuff, used NoScript to filter out the crud, and opened up Avira whenever I felt like it was time for a scan. Never got a virus, ever. And I do live in the real world c: . In fact, I still have a Windows XP SP1 machine that I've used for four years without a single virus related hiccup. No updates installed since the day I reformatted the old copy of XP and started new (in SP1).

Been computing since 1997 and never installed an AV. Never had an issue either. IMO the AV software is too intrusive & also makes the system slow, I use Process Guard for keeping a tab on all the processes running. Also have Ghost which keeps my windows registry secured/Locked.
I use FireFox with NOSCRIPT and i never execute a file with out first checking it with "COUPLE" of online scanners. I am careful with my surfing and I almost never accept a file from any one.

I have an i7. Performance isn't a problem so I run 24/7 antivirus