I guess this is old news for most of you but for those who missed it I thought I would share my experience with the firefox plugin
noscript (I think it's avalible for IE and other browsers as well). I started using it a long time ago and since I have not had one spyware infection and no annoying adware or toolbar installs. It basically blocks all javascript on all sites unless you specifically instruct it not to. Works wonders.
