standard user vs. admin
expressionIT supportsecurity
Daily work in an unprivileged account, elevation only when needed: the desktop version of least privilege, and malware's least favorite policy.
Most commodity malware simply fails without local admin.