Eurograbber is a variation of the Zeus/Sopilka family of malware. I'm surprised his AV didn't pick it up because it's the most popular financial malware after SpyEye and Citadel.
What bank was this with? Did they cover the losses?
I'm assuming something like the following happened:
Your friend → (direct) Mule in your country → (Western Union) to the criminal
I tell my parents to use a linux Mint or Ubuntu live disk whenever they're banking online. It seems to have worked so far.