Your friend has been a victim of the now well publicised "sasser" virus. This virus has spread since the first of may and caused havoc and mahem around the world. If you log onto www.symantec.com/index.htm and then click on "infomation about sasser worm for your enterprise" they explain how to remove the virus.
Either that or go to
http://vil.nai.com/vil/stinger
and download the stinger tool, this free small anti virus program will detect and delete the virus.
Once deleted you must go to the microsoft updates page and download the security patch that they produced. This will stop the computer getting re-infected.
Hope this is helpful.