Just use what comes with microsoft. If you want another layer of scanning then install Malwarebytes. Those two should be plenty for anybody. Also set their DNS to use something that blocks known malware sites (quad 9 is what I use).
Quad 9 is useful, but I found some websites that should work ended up not working anymore or as well. Kind of annoying. But yeah, Malwarebytes is one I haven't thought about for a while. Last I saw one of their things on a computer I was fixing was also one of the last times I saw CCcleaner on a computer as well.
But yeah, windows defender IS usually good enough.
