none.
secured *nix box.
win itself is bloatware, malware, etc. pre-packaged as an OS even before you 'catch' any virus.