Looking at his system tray, it seems he's running AVG. That has an anti-spyware component, no? In addition to that, I can't see spyware injecting Google Ads... it would be one of their own ads they'd inject.
Unless of course, they are injecting their own ads and just masking them inside a Google Ads shell to make it look legit...
Hmmm.
Edit: Having said all of that - and without knowing which language this site [I'm assuming php/perl] is coded in - the only way to get something like that to appear inside a memo field is by inserting the code directly into the Value property... which would very clearly show up in the source code... so I'm at a loss as to how it was done, too.)