2012: The new age of malware - CSO Online - Security and Risk
Interesting read there.
What they're forgetting is FakeAV. I've seen a guy who bought a FakeAV. Needless to say, it does do the "scan" and "clean" the supposedly infected stuff
If it comes to the point that I get attacked by just going to Google's home page, it's the day I'll pull the plug on my router...