I wouldn't say there is ever a "best solution" to anything. Any security analyst/engineer will preach defense in depth or multiple layers of protection is the best strategy.
- Installing all OS and software updates
- Having a firewall
- Installing a highly rated AV/AM product ( i recommend Webroot Secure Anywhere)
- Remove applications you don't use
- Run your computer with a standard account and only use the admin account for administrative tasks
- Keep UAC turned on
- Install EMET and set it to max security
- Download software from reputable sources
These are a few things that you can do/install to help keep your system protected.