"Framed" by Spyware?

it's very possible, it all depends on how they define a wbsite visit to get 600 visits an hour

If I visit certain websites with lot of adverts I have visited 1 site, the connection records will show connections to all the other sites taht host the adverts, counters, trackers and other assorted rubbish and could be listed as 20/30 or even as high as 100 separate sites

I couldn't and wouldn't say whether his usage was excessive, it all depends on the conditions of his employment and whether any internet access is allowed or whether he has been visiting sites inapropriate for a work useage.

Some companies forbid any access except on work matters and if he was doing other surfing then he has broken the rules.

But to answer the question in one word answers, yes spyware could account for a lot of supposed website hits, but to determine whether spyware or other malware was the cause, some one knowledgeable would have to go through the server logs and see which sites and ID known sites that are malware linked.