One of the items I have been telling my clients if you do not need to have access to a certain country like Russia or China and then you should block that country at your firewall. Why? A majority of viruses and Trojan horses have their origins from this part of the world.

Most firewall’s have a country object configured in them. If not you can always lookup the IP address range.