my guess: removing the spyware also removed a few system-critical registry keys/system files/etc. and his os is hash until he can restore them. unfortunately, litestep can't help.