And if you're paranoid like me get a managed switch and setup Snort to monitor your network. That'll protect you more than an antivirus will.
1. https://arstechnica.com/information-technology/2017/05/windo...
12,000 domains of ads and tracking blocked at the OS level!
Which means I only update it for them periodically. It's still better than not doing it.
It aggregates someonewhocares.org and many other sources into a combined hosts file, to the point where it actually slows down DNS lookups noticably on most computers.
I even use it on my phones, and all other devices where I can access the filesystem.
Almost all devices in the world support a hosts file, becase most of the network stacks in use today spring from the same code.
EDIT: It has 40-55 thousand host entries, depending on which version you use. In my scripts I just curl https://raw.githubusercontent.com/StevenBlack/hosts/master/h...