I ran malwarebytes but it didn't find anything.
SuperAntispyware and Spybot found hundreds of
spyware. I ended up having to delete his profile.
I backed up his desktop files but he said he saves
everything he needs to the netowrk drive.

He is available from now until 3, although he has
a meeting at 1:30, but he said you can work on his
computer during that time too.  A Windows
Protection window popped up saying he had viruses
on his computer and he should 'Start Protection'
and he clicked on it.  The window is still there
and won't go away now.