[!Newbie!]

disguise the trojan as a forward, and once your friend downloads and runs the attachment, you should be able to walk into his system...