1. A method for managing pestware on a protected computer comprising: tracking activities of a user at the protected computer; monitoring events at the protected computer; identifying events that are potentially indicative of pestware; comparing at least one of the events with at least one of the activities of the user; and initiating, in response to the comparing indicating the activities of the user are unconnected with the events, a user prompt, wherein the user prompt informs the user about at least one of the events so as to enable the user to make a decision relative to managing the at least one of the events.