Exploit + Vnc and clean it yourself (Score 1)

Put a sniffer on your firewall and take control of infected machines as soon as they come in. Run stinger, patch them and then remove vnc.

We kept a network of 60k 2000/xp machines healthy through welchia/blaster this way.