There is no substitue for locking down the system folders
and maintaining access to them on a need to know basis.
Also it helps to run a good anti malware product, such as Kaspersky.
That is a good security policy, but most people are not system administrators. They are just people with computers who want to get some work done or surf the Internet. They won't know how to take the appropriate precautions.
The problem is with the Windows operating system. It allows code to be loaded and run in a rather promiscuous manner. But many legitimate programs rely on this promiscuous behavior to run. If Microsoft fixes the operating system, then a lot of program will break, including some programs from Microsoft.
This is going to take months to sort out.