Lots of spam is from viruses or worms which capture address books, so your friend should do a virus check.

You are good at show-don't-tell, and some people just are not (notice I haven't posted anything this time...). It's a problem with challenges, maybe because there's no beta process, so people post things that don't really work.