While some high-profile Windows malware has spread using genuine exploits, it's been a long time since this was a serious problem. The vast majority of Windows malware/crapware have been and still are just trojans (sometimes through very obvious pop-up ads and such).