Just to get you started.

Turn on your firewall.
Keep the machine patched.
Install an AV product and keep it updated.
Don't blindly download and install stuff.....read the fine print or you might get more than you expected.