These days a new Windows 0day exploit is detected.
With it an attacker can own a victim without clicking on any file.
Put on a USB-Stick it infects the victim by connecting to the PC.
Tavis Ormandy released an exploit for the “Windows Help Center” of Windows XP ServicePack 2 and ServicePack 3.
By just clicking on an malicious link you can get exploited by an attacker.