Bobsch has pretty well nailed it on the head as far as I am concerned. A good combination of protection and obviously, the price is right.
I personally would also add a good two way firewall such as Sunbelt Personal firewall http://www.sunbeltsoftware.com/Home-...onal-Firewall/ and then when doing cnc, right clicking on the try icon and disabling all internet traffic. Then you can also safely disable the antivirus and malware programs for the duration of the operation.
I completely agree with others that a cnc controller should be completely standalone and have no direct connection to a network or especially the internet.
Art
AKA Country Bubba (Older Than Dirt)