Socially engineered malware is one of the biggest methods of infecting computer users with viruses today, even though there are others out there. Most like to target to less knowledgable computer users as far as I know. So in the end result I still think it's the user's fault as to downloading an infected file. Phishing sites are huge out there today.