I'm currently running Kaspersky internet suite 2010, Check out the AV reviews, It has the highest detection rate.
As for Windows, It has to have all these patch's (Critical Update's) Because of sloppy programming. You dont hear of other OS's being updated this much, Because they are far more...