I do not use AV at all, prefer to set up all patches for OS, browser and plugins, and some other programs.
Never turn off the UAC-control - it's enough to be in safety.
For alarms about insecure bowsers or plugins use
surfpatrol or
qualys browsercheck - that is all.