Format and reinstall. Get it back to how they like it. Then take away their admin rights. Whenever the need something changed you remote in and elevate to admin with your account. I did this with my dads system 10 years ago and not once virus/malware incident since.