what's best for win8.1?

Auto updates OFF... create restore point first before installing??
Windows defender cut it for LIGHT internet use, limited typically to Youtube and Facebook??
 
then I suppose some will say stay off the internet with your audio computer, which actually can be an option, but it IS nice to watch Youtubes on the studio large screen monitors.  Same with uploading off the studio computer to Youtube as well.

What update?  Microsoft has issued two larger updates.  Update from Win 8 to Win 8.1 and recently the 8.1.1 update.

thx Jim...computer's doing great, btw.  Basically I only come here and Youtube, as I take a break from recording and like to watch the videos on my larger monitors. 
I have the computer set to let me know when updates are available, but honestly, not sure how I'd know whether they're needed or not.  They all seem to be *security* related and nothing to really do with general computer chores in general.  So...I just make a restore point before doing any updates.
My preference is to not put on any AV protection and have it running.... and I just use my old computer for emails, etc.  But it is nice to give the ears a break and see what might be happening around here. 
 
I get the *unsavory* from my wife!  ...presuming that's what you mean.

This thread is a little long on the tooth, but I want to weigh on on the AV discussion. I am a software architect and I am afraid I disagree that AV is not needed as long as you stay on "trusted" web sites. ANY site can become a victim of a malicious attack that can allow viruses or malware to infect visiting PCs. 
 
My advice is to either keep your DAW workstation off the grid or fire up AV when web browsing and turn it off when your done.
 
That's my 2.5 cents anyway!

Jim Roseberry
 
 
First, Everyone should have an up-to-date backup image file of their DAW's boot HD.
That's the ultimate protection against infection (and many other issues).
The odds of being infected from visiting trusted audio specific sites for downloads/authorizations are minute.
Sending and Receiving Email is a whole different ballgame.  That increases odds of infection exponentially.
 

Not to belabor the point but, even a safe site can be a target of an attack resulting in malicious software finding its way onto a visitor's PC. It's happened with major sites such as Yahoo!. I don't go online for a minute without AV running. The back-up image you mention is really important. If the stuff hits the fan you can go back in time so to speak.