The combination of communication with a known C&C server and botlike activity is usually enough to conclude this is a positive determination of a botnet.
Wikipedia foundation.
