I guess you could close all your applications and watch traffic with Wireshark for a while, since antivirus software doesn't seem to be very proactive in this c

I guess you could close all your applications and watch traffic with Wireshark for a while, since antivirus software doesn't seem to be very proactive in this cases. Fortunately this kind of exploits seem to go for the low-hanging fruit: outdated plugins like Java, Flash or Acrobat. If you have any of those enabled and not up-to-date, you're vulnerable. The sensible recommendation seems to be use some form of click-to-play scheme, depending on your browser.