We have all the proof we need that MS is running an ad farm from the base windows experience. What proof do you have that he was infected with malware beyond that?
Where's that proof? I also run windows 10 at home, no issues with cpu or ads. The build servers at work? Same. no IE cpu hogs, no ad farms ... That's why i think this is some malware that has gotten by, and not ad farm.