depends...

Normal home users, always use a non-administrative account. Use "run as" when admin permission is needed. Update your windows online, update virus/adware/spyware def frequently and scan your system periodically. If you wanna dig in, use packet filtering and proxy/transparent proxy in your network, install network intrusion detection, check file system integrity...