8. "My computer has a virus, but I clicked the prompt to update my antivirus software yesterday."
Whoops. And this despite numerous reminder emails from IT about malware masquerading as antivirus updates. To be fair, some of these phishing or social engineering scams are sophisticated and tricky. But that's why we send out the warnings. If only we could get users to cast aside messages from the baddies as quickly as they cast aside messages from IT, thinking, "Oh, it'll never happen to me."