You are handicapped.Since anyone can get infected, even best friends, that doesn't instantly classify them as "not worth your time" or "handicapped".
I stand corrected
Most drive-by-download attacks often have some sort of method of auto-executing the downloaded file via an exploit. I'd imagine this is the case here as well.
I suggest keeping profiles private, they won't bother with you if they don't know if you're worth their time.