Use wireshark to scan the traffic when you execute the bot ;)
if you see any FTP, http, IRC protocol appear than double clic on that line !
w00t now you can hack the hacker xD
if it's an ftp stealer, you'll find the ftp informations !
if it's an IRC bot, you'll find the server and the channel...