1. In a computing environment, a method performed at least in part on at least one processor, comprising: computing a score indicative of a likelihood of malware being activated on a computing device; and based on the score, taking a protective action to mitigate damage that otherwise is able to result if the malware is activated.