Noscript and whitelisting
Noscript can be more useful than AV software.
Also routers, when plugged in should serve ONLY the web admin login, with instructions and warnings about drive by DNS poison and have to have login user & pass changed.
Also uPNP should be illegal on a router.
Biting the hand that feeds IT
