Its totally possible that his LR account was hacked, and has been used by the hacker itself to rip his customers so that the customers don't get confusion. I mean even SpyEye can do all this, like fuck his lr, icq, forum pw's and every single account he used on the infected system.
So maybe he...