It appears while he was there, he made multiple profiles. it appears multiple profiles have been appearing with a malicious link in them. When the poster posts and someone clicks the profile, BAM !!! A malicious spyware report is forwarded to Google. It appears the perpetrator has been using floating IP's in these profiles to avoid VBulletin ID.