We have all the proof we need that MS is running an ad farm from the base windows experience. What proof do you have that he was infected with malware beyond that?
I see people talking about ad farming - but this seems like for whatever reason IE was opened - and it's default home page is MSN, which has ads.
Where are you getting ad farming from?