Does CIS protect against JSRedir-R? I read it is responsible for the majority of drive-by malicious downloads / exploits (http://remove-malware.com/) ?
You can always protect yourself with Firefox and NoScript.
You can Sandbox your internet browser that will protect you. ;D
For me the problem of using a sandbox is that normally they are a litle bit slower than a normal browser and i see this slowness normally when I start the browser under a sandbox