Geeze this sucks. And the $400 is inconsequencial if the toolbars are of the type that can be remotely updated. Kill as many sponsor accounts involved in the initial heist as you want but later the person can enter a "legit" sponsor relationship to serve their thousands of toolbars
Hope you can get this taken care of soon, SD