Java

For awhile now malware has been getting installed on client workstations due to java running in the Web browser. When java being out of date is fingered as the problem, the question is always the same, what is java and do I need it?
" What is Java technology and why do I need it?
Java is a programming language and computing platform first released by Sun Microsystems in 1995. It is the underlying technology that powers state-of-the-art programs including utilities, games, and business applications. Java runs on more than 850 million personal computers worldwide, and on billions of devices worldwide, including mobile and TV devices.
Why do I need Java?
There are lots of applications and websites that won't work unless you have Java installed, and more are created every day. Java is fast, secure, and reliable. From laptops to datacenters, game consoles to scientific supercomputers, cell phones to the Internet, Java is everywhere!
Is Java free to download?
Yes, Java is free to download. Get the latest version at http://java.com.If you are building an embedded or consumer device and would like to include Java, please contact Oracle for more information on including Java in your device.
Why should I upgrade to the latest Java version?
The latest Java version contains important enhancements to improve performance, stability and security of the Java applications that run on your machine. Installing this free update will ensure that your Java applications continue to run safely and efficiently."
*Taken from: http://www.java.com/en/download/faq/whatis_java.xml?printFriendly=true
Clear as mud right? The gist is, it's a technology that enables programs to run, generally in an OS (Operating System) independent fashion. So that covers what Java is, so how about why you need it? If you play Minecraft, you need Java, but just not in the browser, as the game was made relying on Java. The problem is, that by installing Java onto your computer, it ties itself with your Web browser(s). To be secure and to play Minecraft, you need to unbundle it from your web browser(s) you use.
You should be off of version 6 of Java by now, Oracle has it as end of life. Ensure you are on 7 Update 40 as of 9-23-2013 and under the Control Panel in Windows ->Java -> Security tab and then uncheck the box for "Enable Java content in the browser"  -> OK -> OK.

2013 Anti-Virus

AV is like a immunization shot, after you get one you wouldn't hopefully think that rolling in medical waste is a good idea.

 I heard something to that effect in one of the many podcasts I listen too, and I have to agree. During the course of a normal week, I see Windows PCs infected with all manner of crap. Windows PCs that are "protected" by several different vendors AV products. McAfee, Norton, Trend Micro, AVG, Avast, Avira, Kaspersky, Microsoft, and yes, even my much preferred, ESET.

The most common thing I hear from clients, besides their favorite, "How did I get infected?" is "But I have Anti-Virus and a Firewall, so I can't be infected!". This makes me believe that the amount of garbage that the bad actors are putting out more than outpaces what the good guys can do to keep up. At most, current AV is 60% effective across the board, unless we talking a targeted attack, then I'm sure AV covers next to nothing.

In the end, only your own wetware can save you!