With the cryptowall and cryptoblocker virus running wild, I have had a few clients be affected by this. The easy answer is to block executables from being downloaded. This will prevent users from downloading them and infecting your network. Most modern firewalls can help with this task.