It would never work.
The malware got onto the systems by dodgy email attatchment (my preference for users that click on the link/attatchment is to be burned alive infront of the rest of the staff) and we all know that despite the signs/training it will be From: Doug(best friend) " here watch this video" and the user will click on it (even after seeing my demostration 10 minutes earlier).
And i were the crims.. leave a nice little booby trap on the machines timed to go off in 12 months so I get a nice annual subscription.
Paying the danegeld means the dane will be back next year for more