I would suggest doing a clean install and then once its installed use a good anti virus/firewall like
Bitdefender Free which may keep him off your PC.
Comodo isn't bad either
backup everything you want to save
download the
Windows 10 media creation tool and use it to make a win 10 installer on USB
change boot order in BIOS so USB is first, hdd second
boot from installer
follow this guide:
http://www.tenforums.com/tutorials/1950-windows-10-clean-install.html
when you reach screen asking for licence, click "I don't have a key" and win 10 will continue to install and reactivate once finished
On the screen where you choose where to install win 10, if it gives you an error about GPT drives, delete all the partitions on...