We just load spybot on each machine and run it locally occasionally. We are pretty good about reigning in random internet use, and we also use Mozilla on a lot of the machines. We also avoid lots of virus problems by using Eudora.