I'm not aware of any AV product that works without being installed on the client. I can think of some ways you could detect malware on your network...
- Run the AV scanner against a shared file system e.g. the windows C$ share.
- Use a network-based IDS e.g. snort to look for virus/trojan signatures on the network
- Scan hosts for malware services e.g. trojan ports, mail/irc relays
None of these are going to stop the clients getting infected, this will only detect infection after the event.
Jimbob