2nd option, use a password-protected wallet file, Malware can't decode the code, isn't ?
Everything is possible as long as the system is connected to the internet. So you can't actually protected your wallet by just putting a password.
The only way I can possibly think of right now is that Op should try to buy a new laptop one that has never been connected to the internet before or if it has he should wipe everything from the system and install a new Os. After which he should install his wallet and try as much as possible not to ever use the system for any other activities such as surfing the internet.
That will definitely prevent the system from being infested with malware.