I agree that you need more than antivirus. There are some things that antivirus just doesn't catch. I have AVG and Malwarebytes on my laptop. I've recently ran into issues with my DVD drive and I was wondering if I had an infection. Ran my antivirus, nothing showed up. Ran malwarebytes, came up with 8 incidents of malicious activity on my computer. (didn't fix the issue...-.-) But I know you need more than AV...
Yes, I feel AV isn't the issue. It's the human controlling the computer that is the weakest link.
If people just learned a little about security, much of this malware would be dead-in-the-water because it would be less likely to spread.