I took a look at Rickydee and he has no posts, no signature, no avatar, so that leaves out his ability to launch anything.
I had the server company run a diagnostic to see what is launching but they saw nothing.
I ran Googles software and got nothing. see attachment
I ran Audiokarma.org/forums/ through webpagetest.org and again show nothing launching like this.
You may run the same tests and see the results for yourself. If it is intermittent, the programs would need to run at the exact same time the malware launches. Difficult at best, but needed to determine what is launching and from where.
Not everyone, including me, is getting this linking, so again compounding the difficulty.