Well, I won't go so far as to say I'm an online expert, far from it I believe, but, I do have my own thing as far as protecting myself.
Let's start this thing from the very moment you hook that computer up and come online. The very FIRST thing you should do, the first program you install before anything else, is an antivirus program.
I don't care what, from Free AVG to Nord32, whatever you want, just get it and keep it running. The next thing you need to do is head over to Windows Update and grab EVERY critical update that is listed. Other updates are optional, but keep in mind they really may be needed.
Once you've taken care of this, it's time to get a firewall. Once again, free or paid, get one, install it. You've got everything from Kerio to Zone Alarm, there are quite a few so pick one.
You may want to visit a forum such as this for ideas on the better AV's and firewalls out there, but the "perfect" firewall for you can be found later. What's important at the start is having one.
Now, you're safe, comfortable, and ready to go, right? Hold on their my little surfing addicts, you have yet to deal with pop-ups and spyware.
Calm down, this won't take but a little more time, and then you can surf to your heart's content. Let's kill the spyware first. Download, install, and update these programs (these are the most popular and respected, not the only ones out there):
1. Spybot Search and Destroy. Looks for and kills cookies and spyware. Mostly deals with the "harder" spyware types such as Gator. It also has some options to detect tracking cookies and a few other options.
2. Ad-Aware 6. Deals mostly with tracking cookies and spyware caused by many of the ad's that you see plastered on webpages. Very nice and fast program.
3. SpywareBlaster. Now we get to the fun part :-) This little baby, when kept updated, keeps spyware from getting on your computer to begin with.It can also block Flash, which is mostly used now evidently for volleys of ads when you visit some websites. Though keep in mind if you need Flash for something, you have to unblock it within SpywareBlaster.
4. SpywareGuard. Does the same thing as SpywareBlaster. What's important to know is that the programs above compliment each other. That is to say, if you have them all, what Spybot misses, Ad-Aware may catch, or vice versa. same with SpywareBlaster and SpywareGuard.
5. IESpyad. This acts like a web filter of sorts. It places known spyware-filled or otherwise bad websites in your IE restricted sites list. It prevents access to websites that will bombard you with spyware or at least keep them off your system while you view the website.
Often times it will let you view the website, but prevent the sneak installs of spyware, Other times you may not be able to get into the website at all. Don't get mad, you'll appreciate it doing that most of the time.
Now, there is one other thing you need to have. First, you may or may not have heard of a nasty little trojan/hijacker/spyware thing called "CWS". If you want a lot of info on it, you are in the right forum. If you want to kill it, you need CWShredder, a program designed to kill CWS variants and only them.
There are other things you may want to look into, such as MRUBlaster, a cookie/temp files/history/recent files cleaner that does a nice job, but, if you know how to clean up your cookies and all, you won't need.
Another is HijackThis. A program designed to scan your system and let you delete the bad things. Ok, huge warning here, this program is not to be fooled with. It will list things you need, want, and don't want all in one list.
There will be a time probably where you will post a problem you have and someone will ask you to run this program. Do so, but don't delete anything until you have shared the list of things it found with a knowledgeable person in the forum you posted the problem in, such as here. Until you learn what is good and bad, don't touch anything.
Ok, you've got the required programs installed and updated. Now you can start looking at the program help files and learning how to use them, and, you can start seeing whether that antivirus software and firewall you pass muster.
Come in this forum and do a search for the names of your programs, see what is said about them, them go elsewhere for other opinions. Then you can start seeing whether or not you picked the right one for you. Oh yes, test that firewall. Some firewalls have testers built in or you can go somewhere like GRC.com and test it.
You don't want an ineffective firewall or you may as well be without one. Read the results of the test and any explanations/suggestions given. Fix whatever problems it tells you about. If you don't know how, read the help file of your firewall or ask in here.
Ok, programs updated and running, firewall configured and tested to be effective. You are about done here, but one last thing, e-mail protection. Let me make this short and simple, don't give out your e-mail address to any person/website unless it's absolutely a have to.
Even then try giving a Hotmail/Yahoo address instead. This will greatly reduce spam to your real e-mail address. Use your real one for friends and ordering things from legit websites.
Also, there are two security things you need to worry about, especially with Outlook Express or Outlook. These are the Preview Pane and HTML. The Preview Pane allows you to open an e-mail without double-clicking to open it. This is highly unsafe and is a good way to get hit with an e-mail worm or virus.
Disable the Preview Pane by opening up OutLook or Outlook Express, going to Tools, Options, clicking on the Read tab, and making sure "Automatically download message when viewing in the Preview Pane" is unchecked. This is a must.
Now, you should disable HTML in your messages. You don't have to, but be aware that sometimes people imbed hidden coding within HTML coding that can execute hidden commands and really cause some harm. Disable it by staying in Outlook or Outlook Express, staying on the Read tab, and checking the box next to "Read all messages in plain text".
Doing those two things will greatly enhance the security of your e-mail. Ok, guess what? You are released into the Wild West of the Internet! All of these programs I have mentioned can be found in here, so you won't have to search hard and long.
Last thing, NEVER open e-mail attachments you didn't know 100% sure were coming. Then, if you knew they were, verify with the sender that they truly did send it. Some viruses can forge sender names and make you think someone sent you a virus when they didn't.
If they did send it, save it first and run an antivirus scan on it to be positive there is no virus lurking in there. Also do the same with anything you download from the Internet, ALWAYS.
Keep some common sense, if you go surfing for hacking tools or hacked programs, chances are you are going to be open to spyware, viruses, and hacking yourself, same with a lot of porn websites, they will usually be infested with spyware.
Taking precautions and having some common sense will keep you out of 99% of the dangerous or annoying situations the present day Internet can throw at you. Have fun! If I missed out on some points, remember this was for the new people who just hooked that computer up.