Heya there (: Of course, paying for your security is generally the best choice, but...
As a scanner, you can use
TrenMicro's HouseCall For further protection, you can use both
Superantispyware and
Spybot For more high-profile malware, you can use
HitmanPro. There's a free trial offered, and it will continue to remove cookies even after the trial expires. For malware, you have to buy the full version after the trial expires.
As for firewall, I agree with everyone else. Windows firewall is one of your only ways. Just do scans *very* frequently. If you know how to use Linux or BSD, you can set up free firewalls in a virtual machine.
To prevent infections, I recommend you use
Sandboxie. You can find a great tutorial
here.
And always generally just be safe.