I know that all, Haplo, and I agree.
I am quite aware of security holes like scriptings, Java, and that you should not trust to click everything, everywhere. And like I repeatedly said: even modern security software does not detect especially this damn Zeus thing reliably - as a matter of fact latest Zeus incrantions defeat dsecurity software most oif thte time. My browser is pretty much closed up, almost on maximum settings, but tzhere is always the chance of human error: that I oversee to update Adobe Flash in time, or during some ordering process I needed to unlock cookies or some scriptiung setting , and afterwards forgot to close the door again.
The damn thing with drive-by attacks is that yiou must not do anything anym,ore to exceute malware. Simply ladning on the site already triggers the activation, you must not open a mail or click on a link on that site. It is like walking in town. You muts not ask people to cpough at you. If there is a sick person breathing once or twice in your neck and you are unlucky, you got infected. You can avoid that only by staying at home, and not going out.
I do like this on the web most of the time. But some risks simply mjust be taken, and maybe this time I have leaned myself out of the window in just the wrong place. Click one pic of a Chinese fighter on Google Picture Search - and voila. I played, I took a risk, and this time I got burned. It's been the first timne since many years, and I am lucky enough to have realised it within hours of daytime and minutes of computer operation time.
The one tnhbing I wanted to get over in my opening posting is that there are threads out there, like Zeus, where you cannot trust in your security software to protect you. Zeus beats it in 3 out of 4 events.
You swim at the beach, its holiday. When you do not meet Mr. Shark in the water, everything's fine and holiday continues. When you meet him, you are srewed. That'S how it is.
Much worse it becomes when you do not realsie that you have been compromised and that you have been assimilated by a zombienet. And I think that is the case
with most people who caught an infection. They even do not realise it. I have, immediately, and reinstalled and changed my important passwords, for banking and buying tansactions, not for harmless forums. Time-consuming, but no financial damage done (so far).
In the end, it just confirms me in my usual paranoia (shopping accounts, social networks, Google, and the like).