If he runs 3 VMs at once + his host OS that's definitely an i7, and not just an entry level one, mid range.
~
Eh, if he's using XP on the VM's and is ONLY doing malware scans he can pull it off alright, though anything else whatsoever he'd need a minimum i7 3770k OC'd up to 4.5 Ghz minimum IMO, but that's only for maximum performance. I myself would be PISSED at a laggy VM.