Another approach that I've seen is periodically running ClamAV from Linux. It has no impact on Windows' performance, and it less likely to be compromised.

Incidentally, ClamAV is also available for Windows.