Thing is, Linux barely has Autorun to speak of. While it exists, I'm uncertain how many distros have it enabled or how reliable it seems to be.
Not that hackers are really targeting Linux that much anyways - it's not a big enough target to be useful to them.
But yeah - those who claim the security of Vista or Windows 7 is "no better" than XP are just fooling themselves.
"Why do you think so many users are still running Windows XP?"
In the case of my grandparents, it's a case of they don't want to buy a new OS/computer right now

. And I do think their XP machine is infected, unfortunately. They can access most every website, except for Windows Update - a sure sign that something is blocking it

. What's worse, the AV solutions I've tried don't detect anything, so they're definitely looking at a drive wipe and OS reinstall or a new computer to fix it.