Hello there, you have a good secure config but can i suggest something?
You can add zemana/emsisoft emergency kit/malwarebytes/hitman pro - choose any of these as your on-demand scanner as real-time protection is not on-demand scanner. Also consider adding https everywhere extension to your browser.