Need advice for avoiding viruses via scripting/browser

[adamjthompson]

Our company employees multiple marketing researchers who spend 20-40 hours per week browsing the web. They browse thousands of websites, and semi-regularily encounter an infected site which results in them getting a virus. Anti-virus programs are of limited help.

I'm assuming these websites are infected with some sort of javaScript, Java, or other scripting that installs the virus/trojan. In most cases, it's the type that then downloads and installs other malware, resulting in a completely disabled computer within seconds.

All of our researchers use FireFox.

I'm working on a security plan to reduce these malware incidents and would like help. So far, I have:

1) Basic stuff like keep Windows updated, install an Anti-virus program.

2) Consider switching to Linux. Not sure how practical this is, though, as we don't have an on-site IT person and I suspect most of our employees would be unable to do much with Linux.

3) Consider installing http://noscript.net/features Again, not sure how much this will help, since many websites will require scripts to work correctly, so we'll have to disable it a significant amount of the time.

Any other suggestions/ideas?

 

[voyagerfan99]

NoScript plugin for Firefox should do the trick, as well as installing a paid copy of MalwareBytes Anti-Malware on each computer. The resident protector on it is pretty good and can block most things.