Missed my point Sarah, the infected default firefox browser statement...

What I meant was the clients had FireFox installed, it was their default browser (meaning they used it not IE) and they still managed to infect their computer.