You should have backup solution or just relying on Windows restore points?.
If you visit phishing sites you need antilogger
custom keyloggers or keyloggers built for a specific attack can present a difficult challenge, as they won’t be recognized immediately as malicious software, depending upon their actions on the compromised machine
Good, simple, but effective config.
Like ha14 said, add a backup solution to your configuration, wheter it is an offline harddisk or a cloud backup.
Concerning the on-demand scanners, there is lots of other software that you can add like Hitman Pro, Herdprotect, Emsisoft emergency kit... just to name a few. Don't be afraid to check them out!
Thanks for sharing and stay malware-free