> And then they'll be owned by a 6 month old security vulnerability in a random drive by malware advertisement or internet worm This does depend on how savvy a

> And then they'll be owned by a 6 month old security vulnerability in a random drive by malware advertisement or internet worm This does depend on how savvy a user is. If they're on Win, they can just download the Sysinternals suite and poke around looking for rootkits or obvious attempts of gaining persistence. Autoruns is an invaluable tool for this and I have caught a few nasty rootkits with that. But you are right, a concerning number of people leave the defaults switched on and don't attempt to harden Windows. The first thing I do is uninstall Powershell and lower the attack surface because I don't want another d00d at Blackhat showcasing how he/she used Powershell to gain persistence on a machine for months at a time, sometimes years.