You can also turn all outgoing connections off by default in the windows firewall, then whitelist the couple of programs that actually need to access the internet.