NOT running as Administrator, not visiting dodgy sites, not using torrents....
I do all three. Never been a problem as long as my AV,
Peerblock and Spywareblaster are updated and running.
Not necessarily makes one fully bulletproof as I recently got
clobbered by opening an attachment (trojan keylogger) from
someone I trusted but that was my own dumb silly fault.