The problem, of course, is in the implementation. It's actually quite difficult to determine - for real - if updates are available for a Windows box. Many viruses and trojans pull tricks to prevent the Windows update service from working properly, so one might determine that there are no updates when there really are. Of course some of them are none too subtle about it, so a lot of these situations would be detectable.
I think the goal is more to warn a person that their box is vulnerable, not that it's compromised already.Quote
I'm not sure it's such a good idea to weigh down the official Bitcoin client with what would essentially be a large chunk of anti-malware code.
I wonder if somebody already has a library to do exactly this. If it was already build and maintained, that might make the decision easier. Trying to have the client maintainers also maintain a list of vulnerabilities to probe seems to be a bit crazy.
