I'm looking at a packet capture of some traffic of a malware infected computer, where do I begin to look in trying to find the server program that the malware bot is trying to contact?
For Windows, see this stack overflow question. TLDR summary:
You just need to find out which port your malware communicates from. In Wireshark, this is the part where it says "adobeserver-2" or "adobeserver-1" in your packet capture. Wireshark displays these names instead of the actual port numbers to give users an idea of what the port is usually used for. To get the real port names, disable this feature as described on the Wireshark Ask site.
Alternatively, see How to determine what program send the packet recorded in Wireshark? where it is recommended to use a different program for this task.