I would like to suggest he closes all windows, calls support, allows remote access to address the issue while someone in another country (who speaks broken english) rifles through his operating system and then puts him on hold for a bit. At the news that he has been infected with an extremely invasive malware, I would suggest he hauls his dna motherboard into an ER where they can attempt to apply an updated bug patch to his last known update: remdesivir + intubation and wait to see if a system recovery is possible. He will need to tell everyone in his address book not to open any emails from him while we all await the results.