Items to check
Well. if he have Mcafee, he is not protected. Mcafee is bad in resources consumption and detection engines.
And AV is just 30% of the protection. The other 10% is firewall / windows updates and the remaining 60% is USER PERMISSIONS. I'm tired to explain to users and IT Pros in seminars the MAIN security measure in a Windows System (and Linux, MAC, Unix, etc) is user limited permissions. No software (including new trojans, spyware, malware, virus, etc) can be installed if the user have limited permissions. Only admin account and in some cases Power Users can install piece of software.
And if you are traveling and using unsecure networks, use FREE WINDOWS STEADYSTATE, with this YOU CANNOT BE INFECTED.