[andrewchambers]

That doesn't sound like any spy ware or virus, Just got someone to click a link and logged the ip which connected to the server.