Is it still enough?

My basic setup (Xp) include the use of LUA, disabling unnecessary networking service, windows firewall and an antivirus.
My pc is running smoothly so I assume I'm safe. But, is this a safe
assumption? Or I just can't see what's happening?
I mean, there's a lot of talking and writing about unsafe browsing, web site forgeries etc. that you can't but feel unprotected.
My point is: is it still enough this basic setup or do we now need a security suite?

Thanks,
-FG
.