avg or avira, avira has pop ups, but i like their detection better. No matter what, a good dedicated firewall infront is worth it's weight in gold that does statefull packet inspection.

i prefer untangle for that job.