Possible ideas - change malware key & xor key - clear database - change endpoint names if possible - ability to automatically delete bots that haven't called back in X hours (1?)