I'll second all of that.
FWIW, when I'm doing a (re)install of Windows, I don't even install AV until I'm done fully patching the OS. I have yet to get a new box infected.
(of course, I'm behind a hardware firewall, too - as you should be. Your router protects you!)
I'm pretty sure that this
But seriously, I'm not sure who started this "you can get malware within seconds of connecting to the Internet" rumor.
was born back in the XP 'gold' days. Remember that Windows Firewall was, by default, not
enabled (and, this poor decision wasn't reversed until SP2), and many, many machines then were directly connected to the 'net. No patches + no AV + no firewall + direct internet connection = big, ripe target.
I've seen article upon article where this was proven.
But, even that risk is entirely eliminated, so long as one is behind a router, and doesn't browse the 'net until the OS is patched, and AV installed.