Here's the site: www.pack134.com Here's the IP: 162.244.94.33
Here's an excerpt from the interface:
-System Information-
OS: Windows 10 (Build 17763.615)
CPU: x64
File System: NTFS
User: System
-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0
-Website Data-
Category: Trojan
Domain: pack134.com
IP Address: 162.244.94.33
Port: [65222]
Type: Outbound
File: C:\Program Files (x86)\eM Client\MailClient.exe
The Log file is attached
Just a quick note: It would be nice to have been able to perform this task without spending an hour on it....maybe a button. Then again, maybe that would generate too many hours of investigative research for your team. Oh well--it would be nice to get this resolved before I get any calls from council members.
Thanks!
Roy
MBAMSERVICE.LOG