Perhaps the GP is receiving malware through a targeted or non-targeted advertising campaign.