blaster and sasser exploited services that were turned on by default in windows. you did not need to download anything to get infected. instead it hunted you down and crapped all over your system.
my systems were patched before they hit. all the computer security news pages were publishing articals about how the exploits were found and the damage they could do....and BAM!!! Epidemic.