One solution is using a limited user account in Windows and uses this user account only for web surfing. If malware get into your system it will not to be able to execute its code, as it doesn’t have the required rights.
You can create a limited user account in Windows through – Control Panel – User Account (detailed procedure for creating limited user account).
Even though limited user account can give a high level of security, this may not be the case always (consider reading this article).
Even if you have an antivirus scanner installed, you can also consider installing ThreatFire form PCTools, which is ideal for tracking down malware.
It continuously monitors all files and folders for suspicious activity and sounds an alarm if malware changes the access right or attributes of file or folder.