Information Protection and Security

The Wikipedia entries for bot and  botnet give further background on the types of attacks and preventative measures.   To remedy, examine the host for evidence of infection by malware and remedy as a malicious code incident.  See Handling Malicious Code Incidents in Computer Security Incident Handling Guide.  
 Rutgers staff can use the following URL to check for records in our intrusion detection database for a specific host. They can only see data for the host from which they are connecting to the tool from.
<http://rusecure.rutgers.edu/snort/alerts.php>
Sysadmins should be encouraged to check the tool two to three hours after they believe they have cleaned a system to verify that the remediation was successful.
This tool is experimental.  Comments to abuse@rutgers.edu.
Additional references:

• Botnets and Beyond: Crimeware in the 21st Century
• Zombies and botnets: Help keep your computer under your controls