The problem in this case was the shell script /was/ the result of a compromise. The Conversation Essentials 1.1.3 for XenForo 1.1.X plugin that was nulled was not.
We expressly forbid warez in our Terms of Service; we cannot allow this account to go back online due to the installed nulled script.