Maybe install itself as a network packet filter and work as temporary firewall until the machine is restarted?