Samba - NFS mount - mapped drive - security

[Linda Lux]

I hope I can explain this:
I have samba running on hp box 11.0.
A "public" directory on HP is a mounted drive on all users PC(configured in my smb.conf)
I had a user ftp from a telnet session to the outside world to retrieve some data. Apparently the site had the w32.netsky@mm worm and it came over with the data. The folder where the data went was in the "public" and wherever there was a folder that had "download" in it's name, that is where the worm went. So if a user opened that folder, it was hopeful they had the latest AV on their desktop and "got it". To get around it I had all of the folder with "dwonload" in their names changed, and haven't seen it since.
Now my manager wants me to run AV on the HP box which I know there isn't any.
Is there a way to secure the "public" mounted drive through the smb.conf file?
Is there an ftp security setting of some kind?
I am a 'newbie' to this, so all the help I can get will be much appreciated.
I have attached my smb.conf file

[spex]

Hi,

> Now my manager wants me to run AV on the HP
> box which I know there isn't any.
This is not accurate. HP-UX binaries of ClamAV are available here:
http://www.clamav.net/binary.html

> Is there a way to secure the "public" mounted drive through the smb.conf file?
Sure, but "secure" it from what? A public drive is by definition... public. What do want to restrict? Your local FTP client from downloading there? Personally, I see the clients mounting accessing the share via SMB/CIFS as more of a threat.

> Is there an ftp security setting of some kind?
'lcd' away from public before you 'get'.

PCS