Gomer, he said it was from his email so it wouldn't be a facebook issue.
Latearrival.
Changing the hotmail password should cure the problem if it is what I think it is (almost got hit by that one, emails came from the PYT so I could ask her what she sent to me in 3 emails but otherwise I would have clicked too). Making sure your PC is "clean" would be a sensible step to take too. Don't just trust Norton, run malwarebytes antimalware too and see what it shows up, as well as using the other trusted tools that are mentioned here regularly.