You could just put it down to luck.
Now that's really amazing not having a firewall and never getting bitten.
Just look at me, one of my boxes is running a fully unpatched version on win 95, no AV no Firewall, and it's getting bitten all the time.
So far it's been hacked, used as a Zombie, some dude even managed to run a Warez site from it.
So i think that your friend is fruiting lucky that something drastic didn't happen to he's box.
I hope that he was at least using an AV and some kind of Adaware program...


cheers
front2back:.