Is your friend posting suspicious things on Facebook out of the blue? Or sending you odd e-mails with gibberish or suspicious links?? Your friend has been phished. Their password has been hijacked, and they need to change it ASAP, before the hijacker becomes malicious. Tell your friend to change the affected passwords, strengthen them, vary them between different accounts, and to run a virus/adware/spamware scan on their machine (I highly recommend Norton 360, it's what I use). And warn them to be cautious in the future when clicking on ads or unknown links.
This public service announcement is brought to you by The Dread Pirate Davi.