In my opinion use firefox and chrome with a noscript extension(for chrome you can check their store for a alternative) and adblock.
If you are not sure which site to allow the scripts just don't use the extension and be careful of these pages claiming you to update.
Avast is still on the lookout for such threats so no worries but a word of awareness while surfing online and opening email attachments is always good.
In cybersecurity,the user is always the weakest link.