You need a very strong AV product running on your desktop to detect and isolate the portable executable that gets downloaded. This protects you better than anything. You can also run a web content product to help detect the redirect scripts in these malware sites.