Well, I'll give you some unironic advice.
>The RTM that was leaked on /g/ a while back
MyDigitalLife forums has unmodified MSDN ISOs that you can use. Verify the checksums on the MSDN download center yourself.
>I turn off updates
Don't. Just don't. That's one of the most retarded things you can do in terms of security.
>I then turn off the firewall
Well, most routers provide one anyway, but again, for what purpose?
Install Pale Moon or Firefox ESR, along with uBlock Origin and HTTPS Everywhere. Enable some filterlists.
>without an anti virus
Most people don't need an antivirus, unless they install shit from torrent sites regularly.
>my login goes right to the desktop without a password