I rent a VPS, and as an a kneejerk reaction (it's a Windows server), I got AV for it.
Given that I do very little with it as a logged-in user (I use it as a web server), bar install my own software on it, and occasionally download Microsoft libraries and whatnot, is there a need for AV at all?
I think my question boils down to this: can a machine become infected without a human user being involved, and if so, how? Or do I only need AV to protect my server from my own foolish actions?