The theory is that the CW virus comes from clicking on certain Popup ads though they don't know which ones. I don't recall ever doing so, but I'm sure I've hit some by accident. I don't download music, so I wouldn't say that did it, though if you're trying to get him to stop, far be it from me to take away a tool from a parent
Good luck