Real simple security fix. Use two computers. On that goes on line and one that does not (or rarely does if you need to do banking online).
Browse away on the first computer and then just format the hard drive every month.
The second computer, well, it is not on line so you don't need to worry about it.
At a company, no computer at an employee desks should have access to the internet through the company intranet. Instead, set up internet work stations where employees go to get what they need on the net.
That keeps them focused on getting what they need and getting of the net and back to work and it keeps the company system secure from the outside. If you have salespeople that need to access the company data base, simply upload and update to a system not connected to the intranet.