If you're installing an operating system:
* Use trusted-clean binaries to install it with. Eg. a vendor CD, and known clean installation packages.
* Do not connect to an untrusted network or the Internet until the OS is fully configured and patched up-to-date!
How does that keep you from getting infected with viruses? Maybe some, but not most. Unless there is a new way to patch the users themselves from opening an attachment in an email from someone they don't know. :-)
I was under the impression that even if you have the latest Windows updates you can still get infected with things like MyDoom for example.
