I think you'll find this posting helpful in dealing with your Nigerian scammer:
A third party security audit is the IT equivalent of a colonoscopy. It's long, intrusive, very uncomfortable, and when it's done, you'll have seen things you really didn't want to see, and you'll never forget that you've had one.
The sad part about this is that there IS a way to do it with just using a picture on msn .. i remember there being guides posted about it on one of the skid forums. I never cared much for it as using your own webhost is a much better method to begin with and also opens up other avenues of attack ... after all what good is someones ip alone in this day and age unless your planning a dos ?
Using backtrack for the first time is like being 10 years old again with the keys to a Ferrari.