The auditor probably doesn't know nor care. "Every windows machine runs antivirus" is a checkbox item, zero thought involved.