Here's what I did and I haven't had to fight a virus in years, I hope it helps.
1. Clean os install.
2. Setup EVERYTHING the way I need it, installed programs and set my preferences, set shared printers, turn off automatic updates, etc.
3. Ran backup software(I use Acronis True Image) and saved it to a separate drive. This makes a copy of everything on your drive os, programs, settings that you can load in case things go bad beyond what my virus protection(spyware terminator, windows firewall, windows defender) can quickly fix.
4. Only use the internet with a limited user account, if something gets weird like popups or an extra search just happens appear I just delete the user account and start another one. You can save your bookmarks in a shared folder.
5. No more headaches.