Generally I agree that AV on the host isn't terribly effective. AV in an email server makes a whole lot of sense. I also like the Google warning that you're visiting an evil web site.