It is windows all over again. Just block internet access on everything and allow only a few apps to access internet.