Thank you Gavin.
The only things I might add is that "use a different password" isn't limited to exchanges, but applies to forums, emails, and even pools

, and that some antivirus heuristics seem to hate anything that has mining code in it and isn't explicitly whitelisted.
The password can easily be stolen. Therefore, I use two-factor authentication on all sites where used money and important information.