First, what type of behavior are you seeing that indicates a virus or worm is present?
Second, which online scanners did he use? I've had decent luck with
Trend Micro's House Call.
In case it is just adware, or spyware, I would also install and run
Spybot S&D and
Ad-Aware, both of which are free.