"he had the hard drive wiped and XP re-installed"
By whom? If he paid someone to do it, then he should take it back and demand that the job is done again - properly.
If he did it himself, then I suggest that the XP reinstall should be done again. Boot from the XP disk and run a full reinstall (not a repair).
As he hasn't loaded any software yet, and presumably no data, then he won't have anything to lose.