Ditch the malware magnet
It is no secret that I have little use for endpoint anti-malware protection apps. In my experience they are all, regardless of vendor, virtually worthless. A well written piece of modern endpoint anti-malware will briefly inform you that you have been infected right before it commits seppuku and vanishes, leaving you to deal with the malware and all the little friends it downloaded.
The best way to deal with malware, of course, is not to get infected in the first place. This means learning to manage application vulnerabilities.
I point the zombie-infested malware-ridden finger of ultimate shame at Adobe. Adobe is my personal nemesis. When I go to work tomorrow there are three computers from clients waiting for me, each of them pwned by a flash ads on Facebook. There are another two that, from what I can determine, were hit by infected PDFs.