emClient having a virus

Norton reported to me that it stopped emClient from reaching out to some blacklisted URL.

I presume that an email does that. How to find the culprit in emClient?