Besides things like NoScript, Ghostery, and AdBlockPlus. You can also use a hosts file that's kept up to date with domains known for distributing ads and/or malware:
http://winhelp2002.mvps.org/hosts.htm
At this point, I simply block all ads everywhere as nobody, neither the websites nor ad networks, is performing the due diligence to stop these types of attacks (which aren't new). Till sites and ad networks start taking responsibility for this garbage. I suggest you do the same, block every ad, every bit of Java you can't verify, and remove Flash from your PC (let websites that require Flash know via e-mail that you won't be utilizing them till they choose something that isn't the biggest vector for malware on the planet) and make sure your less tech literate friends and family members know to do the same. Till this hits the websites and ad networks in the pocketbook, they'll continue to not give a shit. So you shouldn't give two shits about whether or not they make any revenue.
