It's definitely extended way into Vista/7/8. I'm always surprised how easily even relatively savvy users are tricked into clicking something malicious.

The volume of traffic originating from compromised machines plinging away at firewalls is incredible