From what he told, he used a password or passphrase which then lead to a BTC address and than mined to that address.
He does not have a wallet file.
Judging from that, it must be a brainwallet. I 'd start looking there. I 'd try with multiple possible passphrase, to see if the addresses that are generated are indeed theirs and have unspent coins there.