freewarestar88,
It doesnt matter who the user is. Bill Gates could be on the computer and before he knows it, boom, hes infected. You dont need to click or install anything really. Just having a live internet connection can be horrible if you dont have the proper protection. Someone can find and open port, and there home sweet home. Full control to whatever they want. Any user can be infected at any time as long as they have an active internet connection.
Software is the best way to protect.
Ben
Nah, it is not THAT bad. If we assume Windows is updated, have firewall you dont just break into computer. Not possible or likely to happen. To get infected you also need to click something, in 99.9% of drive-by-virus/malware that is the case. You do accept java applet, active-x install, running exe-file. As far as I know you dont get seriously infected by visiting any site, can create chaos in browser like not being able to close etc. - typically when people panic and go CLICK and forget difference between clicking on the web and clicking in a run box. Those who make such things know how some react. Also a matter of choosing right browser but automatic infection waiting around the corner to attack I dont think exist, at least not correct to put it that way. Scare mongering have never helped anyone except security companies.
Those who think a 2-way firewall is a must, while referring to leak tests, also forget user have clicked and accepted or the test would never start. Most important link is skipped. They also forget the reason why some should never use a 2 way firewall, same link. Usability vs. security argument.
Remember the big MySpace banner virus?, may be 3 years ago. Those who got infected only did it because they used not updated XPs (=illegal XPs). There is always a reason to be found for why it went wrong

Any Ad-campaign from Norton dont change that.
Best way to protect is not software but information. Try go to one of those security forums full of HJT logs. There is Mcafee, there is Norton and so on. Not like people dont have protection - does not matter if knowledge/awareness fails, sooner than later it will show. All that matters is who the user is.