As others have said; antivirus (it's a good idea, even if you hadn't received the current threat), 2 step authentication and block that kid.
... He sound like one of those people you could get to perform the famous "hack 127.0.0.1" ... xD hahahaa lol...