My friend clicked on a spam video on fb from his android. Are there anymore precautions that should be taken?

[mushygreens]

I already went through his facebook apps with him, and I didn't see anything in there. But it did post the video from his account. I had him change his password and delete the posts. Are there anymore precautions that should be taken?