virus protections

these days: every machine implements host firewalls with virus fingerprint matches
compare it
download virus signature every week, multiply it by number of people, and add up IT people coming down for troubleshooting x trouble probability
use a secure OS that does not need virus signatures nor updates
of course, if the user have clicked a wrong link/send credit card #, we can do very little about that
still, we can protect browsers from being hijacked