I tell everyone I know to run Secunia PSI because it's just not possible for the non-geek to keep their browser secure otherwise. The new (Beta) version automatically does Flash Player updates. Not sure about Java, I updated manually before I could find out if it was going to auto-update. With the number of Flash, Java, etc. exploits these days, when people tell me "I don't know how I got it, I didn't click anything!" It's often true. I'm trying to help a friend out now with some annoying malware (playing sounds randomly, 20/40 on VirusTotal, but of course it's all the commercial ones). Unfortunately SUPERAntiSpyware missed it. I submitted the file with SUPERSampleSubmit a few minutes ago though.