Date: Tue, 13 Feb 2012 11:12:12 +0100
From: "The Electronic Payments Association" [email@example.com]
Subject: ACH transaction canceled
The ACH transfer (ID: 14282248034397), recently sent from your checking account (by you or any other person), was canceled by the other financial institution.
Transaction ID: 14282248034397
Rejection Reason See details in the report below
Transaction Report report_14282248034397.doc (Microsoft Word Document)
13450 Sunrise Valley Drive, Suite 100
Herndon, VA 20171
2011 NACHA - The Electronic Payments Association
The malware is on freac.net/main.php?page=cd12dfacc57c3f82 (report here) which is on IP address 18.104.22.168 (Huawei Technologies, US). Blocking access to the IP address will prevent any other malicious sites on the server from being a problem.