To correct a common misconception: - You are only at risk if you visit the dark parts of the internet. Sure, the shady parts of the internet have always been risky, but a lot of infections in the last few years have come from mainstream sites serving up infected ads. Or a poorly admin'd site will be hacked and malware code injected into every page served. Running an ad-blocker helps, but blocking all Javascript/Flash from being executed (except from servers that you manually allow) is recommended. That way, if you visit a site not on your whitelist, and it has been hacked to serve up malware, it will fail to infect you (99% of the time) because your browser refused to run the Javscript or Flash.