1. Yes and no. I never get any malware, but you are only talking about tracking cookies. I suggest you use a whitelist.
2. What are you using for a local firewall? Not ICF, I hope.
3. No. That's a lazy option for people who don't want to run a regular scan. Just update it and initiate a scan once a week at most.