No antivirus since April, a refused $300,000 demand, and a count that went from zero to 42 million over nine months.