[...trimmed text...]

And both of your infections likely came from email, not from having an open connection to the internet. Which inbound ports do you currently have open on the dialup side of your ICS? You can have some... Login to read more.