Sounds like someone has a trojan running, and his friend also connected to the trojan, and perhaps shut down the server or something...?