Beware: Last malware I got was from an ad running some plugin exploit in Mozilla Firefox. Flash, Java, and ActiveX are all a potential source of headaches. AV is useless with this kind of thing because it's like closing the barn doors after the horse has gone.
Funny thing was, I only had the plugins allowed because my mom needed to use the PC and she isn't a geek like most of us on this forum. She only needed it for business sites (banks/employer site/etc.) and Hotmail. I then forgot to reenable NoScript! :facepalm: She has a tablet now so that's not an issue anymore.