Your friend's Facebook account has almost certainly been hacked.
My daughter's was, a couple of weeks ago. She hadn't used Facebook for a very long time. Then I got a Facebook message from her, but worded in a way she would never use. I phoned her - no, she hadn't been on Facebook for some months. She logged in, deleted all the stuff in her name, changed the password, and left again.
As the others said, tun Spybot and Malwarebytes. When they are done, no harm in also running Housecall. That stuff looks very fishy.