My brother gets malware infections practically every week. Apparently he had a infection over the past 24 hours, I only noticed it because I checked the router logs and saw a massive amount of network traffic on his MAC address.
How can I limit the damage on the network when this happens? I try to educate him but nothing ever sticks. I even set up auto updates, EMET, antivirus, OpenDNS familyshield and a few other things but he always manages to get infected. I usually just MAC block him or egress the bandwidth to 1kbps when I see a ton of traffic until I can physically check the computer.