Doesn't sound like something on his end if the net is running well for him. It could be an isp issue or a routing issue from the isp. However we can zero out spyware/virus activity so please do the following:
Read this thread and carry out all it offers:
[Only Registered and Activated Users Can See Links. Click Here To Register...]
Then:
Read this thread -
[Only Registered and Activated Users Can See Links. Click Here To Register...]