cparmerlee
Blades
A modern PC does not have to be off line. If you’re careful and don’t visit dodgy sites you’re going to be ok.
As "the IT guy", I am advising everyone to please not think this way. It is wrong. Period. There is So much more to this and tons of non-dosgybsites websites websites websites get infected with Malware every day. This is simply incorrect and irresponsible advice.
Plus with Windows 10 (other than the Enterprise edition), unplugging is the only way to be sure Microsoft won't bring you down with one of their patches (which can be as bad as a virus.)
The best defense against forced changes, whether they be from either Microsoft, or malware, is the good practice of regular system imaging. You can easily start with a program like Macrium Reflect Free, and a cheap USB drive.
https://www.macrium.com/reflectfree If you have a recent image, then a full system rollback to the last working version can be accomplished in minutes.
Just being smart about the sites that you visit is no longer a guarantee that you will not be attacked online. There is a new wave of "malvertising" that can exploit ads that you see while visiting major mainstream websites.
Most websites sign up with ad brokers that display ads that are beyond the control of any given website. If a malicious actor places an ad with the advertising broker, you can receive an unwanted script with a random ad. This is where exploit scripts can scan your system for vulnerabilities. Older and unpatched systems are most at risk.