Disable TCP/IP until Post Boot completion?

Hey all, is there a way to disable TCP/IP until the post boot process has completed?
the reason, when infested ,I assume the malware "phones home" during the boot process (I know that MSFT does).

Of course the obvious answer it to unplug the modem, however 9/10 times (If I boot up just to create a a back up) Always forget I unplugged, end up tech specking my Smart TV, Wireless Phone connection before the "AH HA" moment 5-mins later.

Any help, greatly appreciated.