Well, the UPIN Backdoor is flagged in just about any virus scanner or security suite now; evidently they see no use for remote administration tools (yet don't care about VNC or anything).
I'd just install TightVNC and move his mouse around when he's trying to do anything.