Sandbox or BB on its own would be a starting point.3link9 said:Yeah, All you need is at least a BB, Sandbox, and Web Protection if not using IE.
However the regular user wont bother.
Now just to add before you bash me and saying the regular user would rarely get infected with MSE. I could count so many regular users in the malware removal forum with those using MSE with infections such as them opening email attachments. (Look back in December, You will see a lot of those) Also, I can give you my Cousin's number so he can tell you all the infections he had with MSE (Not really, but making a point)
Won't bash at you because of this:
Despite MSE being decent enough for average user, one factor to consider is browsing habits and the type of sites among other things. I have said before and will say it again: I would never revisit MSE on windows 7 due to its slow scan speed and removal. But MSE on normal users have 2 extreme results (good and bad)
To me, any AV would protect me or even AVless, but I have finished a test recently on one computer with a user who somehow always gets infected (browsing habits range mainly from web surfing just about anything as well as some downloads...
No AV: 1 month later - 3 hours spring cleaning using different tools
MSE: 1 month later - spring cleaning that lasted nearly 2 hours using different tools
avast!: 1 week later - Ransomware: According to avast logs it was picked up... still a mystery how it still ended up infected.
AVG: 2 weeks later - unbootable (somehow it picked up a system file into quarantine). Easy fix
Panda: 3 days later was called to identify why browsing was slow as well as system boot/responsiveness: 2 light infections.
Final test: 25 days only: EAM trial: no infections, no complaints. He is now a happy user of EAM.
Also advised him to stop doing certain things and seems to have done the trick