Umm... not to be profiling, but user has a Russian name. That normally doesn't raise a red flag, but compounded with software with information gathering built in to it sounds fishy.
open