It's hard to keep safe. One of my credit unions had an incident back in January where NOD32 was repeatedly blocking some Javascript exploit (a password stealer, but I don't recall which one) and it turned out that the exploit was being served up by an ad from doubleclick which was appearing on our local news paper's obituary web page. As it happens, that machine was used to check obituaries against membership files.