AFAIK adblock wont detect virus, just blocks ads. I use a /etc/hosts file for that, the same one as @williwaw linked.
Fatdog is great for separation, a main home server treated no different to any other web site alongside your own private system where you store private files and only use its browser for direct banking transactions.
Set the server up, saving changes, then once configured set it to reboot that 'fixed' snapshot (no further changes save) thereafter, on one partition. Household general files on another partition - that you don't mind anyone seeing (no different to being on the public internet other than just being accessible locally).
To move a .pdf from there to your personal system, opening it and printing it to another pdf before scp transferring that printed copy to your private system is pretty safe.
For general browsing from your private system ssh works well. Set up sshd on the server, ssh -YC into that and run chrome or whatever browser(s) you've installed.