Reply to post:

Well, AV software has been known to miss some baddies (zero-day, etc), and legitimate sites sometimes are compromised, so don't be too quick to blame a user when they may well have been following SOP....