While originating in criminal behaviour, the magnitude and impact of the malware phenomenon is also influenced by the decisions and behaviour of legitimate market players. This working paper is based on qualitative empirical research into the incentives of market players when dealing with malware.
http://www.oecd.org/dataoecd/53/17/40722462.pdf