See, the thing is, many ISPs offer a free anti-virus package just for being their customer. It wouldn't be hard to re-direct them to a page about the virus they may be infected with, and limit access to the internet to just a few AV websites (including a free solution). They just need to add something to that extent as a clause in the TOS that no one reads anyway.