If I were still running a Windows based CNC (I'm not - I'm running custom version of Grbl-Mega), I wouldn't have it on the internet at all - and therefore, wouldn't need anti-virus software on it.

IMHO, running anti-virus software on a real-time system is asking for trouble...