My brothers' computer always ends up with malware.

One of the first things I do is to look at his ZA Programs list.

I find it a quick & easy way to find tell tail signs of malware.
And further, from there I can see if it actually got out or if it is just a local problem - ie: whether he gave the program access or not.