I never, ever click on a link in any email informing me something was changed on an account. I go directly to the original site and check it out. I actually got the FB email and didn't even open it, just hit delete.

I actually never click on any FB email link (updates to threads or message notifications) or any of the links for updates from here. I just go to the site itself and I can see the notifications there.

People try this with banks, Ebay, Paypal, and other things, too. You get an email that a password or something was changed, people freak out and click on the link that takes them to a look alike site and then the trouble begins.

I, too, run an antivirus as well as malwarebytes and also ad-aware (also free). You can't be too careful.