I just saw my AVG throw up a message stating that "theprayer1" is connecting via outlook POP3, or something like that and checked to find this listed in the Kerio file.

The firewall action said deny, so I'm really hoping it's blocked off.