Signs up under name Aidonis Dimitrios from IP 194.219.29.167
Creates sites like this and sends few clicks and then sign ups with stolen credit cards.
http://videoall.fasteasyfree.com/index11.php
Change index11.php to lesser numbers and you will see other programs he's scaming.
Thief is actually Bosnian. He's using bosniac1**** as his password.