On scripting, the number one best defense is to install a plugin called 'NoScript' and only enable scripting on pages you trust. Has plugin for IE and FF. Here is link to FF one:http://noscript.net/Cheers Greg
