Create a limited account that doesn't have run/install privelages. Use that for browsing the net.

As for the "how it's done part" I think you have enough resources in this thread to get you...