MWB used to be good but nowadays it gives too many false positives. Eset is great, I just like KVRT more since it can be used without internet connection. I mean, if I want online scanner I'll just upload the files to virustotal.
Antivirus don't block Microsoft stuffs, that's why I prefer 3rd party firewall. Let alone random programs, I don't even allow svchost.exe connect to internet unless really necessary.
3rd party firewall + maybe add with bitdefender free or Kaspersky free for extra security and fast block.
I'm not that familiar with KVRT, I just tried it a couple of days ago when it was mentioned here. If it works without an internet connection, then it cannot update it's internal database, correct? So you would need to download a new version fairly often, yes? I'm asking, I don't know. On MalWareBytes and false positives, yes, it does produce a few of those. All in all, it seems to have fewer than most anti-virus / anti-malware programs that I have tried. YMMV
True, KVRT database gets updated every few days. If we refuse to update the database online, it will show "obsolete database" notification a week later, though we can still use it for scanning. So there are 2 options: update it online or download the new version. Personally I prefer the second one, since I rarely use it more than twice a month.
I just spent a couple of minutes looking through the various buttons and menus, and I did not see any way to update from within KVRT.exe. It did show me that the database was out of date, but it didn't offer to update. I went to the Kaspersky website, downloaded a new version, and the database is now current (shows today's date). Unless I missed something somewhere (always possible), I will need to download a new copy every time I want to run it. Which is not a big deal, I have high speed internet.
Sorry, actually I am the one who missed it. Sure if we use KVRT.exe with internet connection on, it will "phone the home" to check for database update, but you are right, it won't update the app itself so the only option is to download new KVRT.exe if we want the latest database. (I had to allow KVRT.exe in my firewall to know this LMAO)