Sounds like your friend's computer was infected with malware.