I don't. I just consider them compromised and block network connection. Usually that works fine unless it's a ransomware or something..