unfortunately, antivirus and antispam software are always a step behind. Once you get infected, you ultimate are screwed. If you have the resources, ditch the PC and buy a Mac. While Macs aren’t 100% safe either, they enjoy being much less of a threat than swiss cheese PCs.
Why spend the money for a Mac...if he already has hardware...just go to Linux...Linux Mint is good and easy.