Windows blocks incoming threats but ignores outgoing traffic by default. Fix that with Simplewall, encrypted DNS, stealth ...