Precisely. Either in the form of AIDS.exe they thought was "that jewel game from the Yayhoos", or your secretary who received an email that said "I can't believe this is you!" and then executed macros in a malicious MS Word or PowerPoint file.