There were a couple of clues... AVG identified the virus as it installed (but didn't bother to stop it), so I know the web page.

There's nothing in the web site code that would have caused this besides a flash banner.

The "Anti-Virus 2012" virus uses flash as it's transport, which I read up on after I got it.

I also found out that none of the AV programs can stop this kind of attack, so away with flash.

Also, if I'm not gonna be protected, I should also not pay, so away with AVG and in with MSE, which is free, faster, less pestery, and rated higher than AVG in viruses it can catch.