toxicTom: I prefer uBlock Origin. And if you know what you're doing you can also add uMatrix (which acts as a No-Script for third-party scripts). It's really astounding on some pages how many scripts you have to allow (temporarily or permanently) which in turn load other scripts until you actually see any content...
Thanks for the referrals.
Themken: News websites tend to have ads and they carry malware now and then. In this way people have received viruses and ransomware and such from big renowned news sites. UBlock Origin is kind of a must have as long as they cannot be bothered to check the ads.
I guess NoScript and such would work too but that very effectively breaks most web pages.
I use NoScript, and I have disabled Flash.
Remember, malware is a statistics-limited proposition; kiddies script in Microsoft because it is prevalent, so odds are better that someone will have a system running it, and of that group some will have vulnerabilities that haven't been patched (or, in this case, can't be patched any further). They also use click-bait names to lure the unwary, and ambush tactics.
Some of the worst infection/s I suffered came from setting Wikipedia as my home page. (The worst was trying to install a game I bought from a store that only supplied a Steam-code; whilst I was connected the installation was hijacked. Nice.)
ZyloxDragon: Another thing you can do is run linux in a virtual machine and do all your browsing from there. Windows vulnerabilities will still be present on your host system, but most computers hit by malware are from compromised websites thru the browser.
Aside from this, you could use a limited browser (one without flash, images, etc.) or even build your own. It all depends on risk-versus-cost.
moobot83: … i used GPEDIT to disable the following, CMD, regedit, control panel, cortana, and many other things …
Is there a way to get GPEDIT if you only have Home?
Microsoft developers get access to all their software (after web registration).