Your AV is your last line of defense. It is incredibly foolish to put all your faith into just that one line.
A lot of people are blissfully unaware of a bunch of security stuff they already have or are freely available but never use such as:
- Nearly every router has have a firewall built into it as your first line of defense
- Windows firewall for what your router does not catch
- DEP for all processes, not just Windows essential processes.
- EMET: Microsoft's toolkit for enterprise security you can use personally.
- OS level security updates
- Software Updates (e.g. when's the last time you checked that your 7-zip is up to date?). This is a big one a lot forget.
- Password re-use. Probably the biggest threat all users face these days when leaks and/or successful phishing happens.