About Toolkits

I have two questions about remote access Trojans like the tool kits like Phoenix and Black Hole.

One; suppose I visit a site and my virus protection doesn’t catch it, and it downloads to my computer, is that it? Do I automatically get infected? Is there anything after that that could prevent it from being executed? Does the person on the other end have to activate it or something?

Two; I understand that these tool kits are mainly used for creating botnets, but do they also allow the person in control to copy files from infected computers’ hard drives? If so, do they all allow this, or only some?

Thanks.