Use ONLY Linux.
If you have some applications that have to use MS, then only way is to DISCONNECT it from Internet while MS is running. Unplug network devices and cables - & even that will not ensure safety because CD & thumb drives will still bring virus.