if you're still on xp but running firefox i'd recommend running noscriptit runs a whitelist - only scripts from sites you explicitly allow will be allowed to run. blocks a ton of this kind of thing
(
boris the spider,
Fri 12 Aug 2011, 19:50,
archived)