Or better yet, if you use Firefox or Chrome get NoScript or ScriptNo respectively. Sure, you've gotta allow every little thing when you visit a new site, but attacks like this seem to be negated by these extensions/plugins. You get used to the runaround after a few days using them, and you're definitely more secure (and there are less ads).
Still - if you're on Windows, the least you could do is download Microsoft Security Essentials. I mean Microsoft hands the damn antivirus software to ya, cmon now lol.
Oh, and CONGRATS BOMBERS!