You need do something about your FR homepage.
It is hard to believe spyware on his computer could mess up his home page on FR. He has this linked. 216.130.188.200 which is basically www3.bigtrafficnetwork.com Was that what he put in originally? Is that his site. Did he forget to pay his bill?