Use a safer DNS preferably encrypted to prevent tampering/poisoning, like NextDNS, ControlID or Cloudflare (Malware version), that alone will do wonders, because it blocks malicious downloads, phishing, C&C, etc. List: adguard-dns.io/kb/general/dns-providers