Yeah, that was you continuing to show how inexperienced you are.

For a remote exploit to work the computer or device has to expose ports to the network your computer is connected to.

"Remote" means that the vulnerability does not require local access. So if your friend connects his infected device to your wifi, all devices connected to the same network essentially are at risk, depending on what's listening on the devices and what vulnerabilities they have.

Your idea about avoiding bad websites is ridiculous. History is full of examples where third party ads had been created to infect one way or another. That's ads that users on legitimate site were exposed to. That's just one little example. There have been numerous examples of malicious sleeping JavaScript code that suddenly wakes up and contacts it's command-and-control server and then download malicious JavaScript code to unknowing site visitors.

Furthermore, you didn't understand my question. Of course antivirus is able to stop malware it recognizes that enters through a remote exploit. The user with antivirus would at least have a chance of knowing that something was up each time and attempt to infect was made.

You on the other hand would sit there clueless with your little zombie computer and laugh at all them script kiddies.

But hey... You just continue trying to infect others around you with bad security advice and have a good day. I'm outta here.