SlimShady said:
Other than the default Firewall? The default firewall is good but with the malware nowadays, the (then Windows 8) Windows 7 firewall.
That is what UAC and your AV is for, it isn't the job of a firewall to block malware. A firewall just controls network connections.
Many AV's have a network scanner that blocks bad connections.
Of coarse if you don't download some malicious files then you should not worry about what is connecting to the web.
Privatefirewall on default settings doesn't display many notifications of coarse the HIPS features are disabled by default. It has a whitelist that you can trust, unlike other firewalls (not to mention the name) adds a bunch of doggy ad-partners to their whitelists.
If you want a firewall with malware blocking, you will have to use one with HIPS features like Comodo, Online Armor, Malware Defender or Privatefirewall with Process Detection enabled.
Of coarse these firewalls will display notifications or in Comodo case will just auto block safe programs with notifying you, so you will have to keep configuring programs to allow them to run and manually tweak the settings.
If you don't want notifications then Windows Firewall is what you need.
If you want malware blocking features included then you will get notifications and have to keep configuring. That is just the way it is.
Thanks.