Checkout this phishing website http://loginthief.com/ and what it does is basically allows you to create a free phishing link and send it my email to your target making it appear to be coming from facebook or gmail etc. When your target logs into his account his password is captured for you. Be very careful after your friend comes to your house and uses your computer, it is very easy to phish anyone
Thanks for the notice man. A lot of people on facebook have so much spam due to the keyloggers in this world..