In message <0ek6i29jsshq14o8iidk6f9tiauc76otb8@4ax.com>, Peter
<z123@nospam.com> writes
[Snip]

A possible partial solution: Do all your wired PCs need Internet access?
If not, you could disable TCP/IP on those PCs, and only allow them to
see each other via NetBIOS.

Here, I have just one PC that talks to the Internet, and several others
that do not. All the machines talk to each other via NetBIOS, so only
the Internet-connected machine is at risk from infection.

--
Ian