Tell him to check out Microsoft Security Essentials. It's free to dl/use and it has real-time protection that won't use too much resources.

I have a few friends who swear by it, one who repairs and recovers data for a living. He told me that it has blocked multiple worms when he's slaved client's HDD's to his comp.