Security budget calculationWork with clients in advance to determine their acceptable risk and budget levels.
Use Windows XP SP2Update all workstations to Windows XP SP2 to give you more control and tools.
Removing local administratorConsider deploying workstations without full rights to the desktop. The use of local administrator is usually not needed by all in the firm.
Educating the business owner on handling virusesAlways install a server-based antivirus that covers the server, workstation, and email.
Choosing the right vendorAntispyware is currently mostly a standalone desktop product, but you may consider corporate centrally managed versions.
Educating the userKeeping your end users up to date in security awareness may require unusual methods for implementation but will be your most effective security tool.
Flattening the machineDon't hesitate to reformat and reload a workstation if you find you cannot trust that system anymore.