- 1). Monitor your network activity. Botnets most often use mail programs and ports reserved for email activity to propagate themselves to other computers. Port 25 is the most common port used for this purpose. Click the "Start" menu, then "Command Prompt."
- 2). Type "netstat -an" to list the active ports. Port 25, if it is active, is listed in the format "xx.xxx.x.xxx:25" under the "Local Address" listing. If this port is active and listening, there is a chance that your computer has been infected.
- 3). Run a malware scanner. Botnets usually use trojans, spyware and other common forms of malware that can be picked up by a malware scan. Spybot, for example, is a free malware scanner that focuses on spyware, and Malwarebytes and Avast! offer similar solutions for your network. Download one of these products (see Resources), then run your chosen application and allow it to delete any viruses it detects.
- 4). Download and install a botnet scanner, such as RUBotted and BotHunter, to scan specifically for botnet activity (see Resources).
Source...