Registrar location doesn't help us one bit. They usually have nothing to do with the hosting of the site.
If a site owner doesn't comply with the cease and desist order, we must rely on the hosting provider to remove the site. In extreme cases, we will get the cooperation of a upline provider but that requires removing an entire hosting company from the face of the Earth.
I'd say in this situation, the case is pretty extreme...they are distributing entire nullified builds of vb and other software, not just hacks.
I reported them a month or 2 ago, but looks like they are back up.