do you really want to surf the net on a critical machine
Critical information is information that should not be known or seen to others.
This information is on your or on another computer.
This computer accesses the internet.
The only way to protect this information in a cheap and logical way is that this machine DOES not surf the internet. Period.
Any stupid surf computer can do the job.
or another seperated environment in which the internet has no access to the rest of the machine and can't download and activate anything unless you personally activate it
VMWare has a Browser Appliance Virtual Machine available for free download. It's a BIG file (258Mb zipped) so be sure you have a plenty of time for downloading. The appliance can be run in either VMWare or the free VMWare Player and provides you with a safer environment for web surfing.
also look at