bitman
Actually, it's you!
There is no software that can prevent malware if one constantly clicks on the same sucker stuff over and over. I have made a living from cleaning machines since 93 and they all have every flavor of this and that to "prevent" bites in the shark tank that is the internet.
It's always the same two or three people in any office and walk-ins are becoming what we call frequent flyers. For those the only remedy is disconnect. Other that that, quit having "fun" on the net. It's no "fun" anymore.
This doesn't sound "cool" but it is the absolute truth man.
^^^^^
This
Most of the really bad stuff is from people blindly opening attachments or popups you get while surfing telling you it detected this or that needs to be upgraded so click on "I'm just an updater not a trojan.exe". Most of the big corporate hacks started with someone clicking on an executable and letting them behind the corporate firewall.
I suppose you could hire a bouncer to look over your shoulder and smack you if you try to do something like this.
Basic rules:
1. Never open an attachment from anyone you don't know or aren't 100% sure they are who they say they are. Real companies don't send you attachments out of the blue. They also don't send you to insecure sites to deal with login problems and whatnot. If you get an email that there's something wrong with your account, don't click on anything; instead go to the site directly on your own where you will likely find that there is no problem.
2. If a friend sends you an email with a "funny" or "You must see this!" attachment, don't bother. Friends who know anything about security don't send friends unnecessary attachments. And it isn't safe because a friend sent it - it may have been sent by a compromised machine or your friend doesn't know they've been hacked yet.
3. Never click on popups. Set your browser to prevent popups and if you're on a legit site that actually requires one you will get a message from your browser to allow it. If you get a popup while surfing, close it with Ctrl-W or the tab bar, not by clicking on the popup itself. Real companies don't need third part sites to keep you up to date.
It's ridiculously easier for hackers to use human engineering to entice people into allowing them in than it is to spend huge amounts of time exploiting holes over many layers of security that will only work on a percentage of machines and be closed fairly quickly as soon as they are discovered.