I'd recommend you sandbox his favorite browser in sandboxie: http://www.sandboxie.com/ I believe the free version allows you to use one sandbox session.

Run him through the process of recovering downloaded files and you should be a lot safer.