The association is not the point of intrusion. A system that was indexed by Google Desktop was enough to activate/trigger the problem according to one site.

Microsoft says though that there are few successful attacks on systems from the data they have.