So in principle an innocuous looking link in a post could give you a Trojan.

Moral being always have your anti-spyware stuff set up.