This is fairly common with hotmail accounts. I don't know how they do it but spammers seem to get into hotmail accounts and use them to spread these links. This has happened to a number of folk I know over the months.
If you get your sister to change her password that tends to sort it out. It has in the past for folk who have experienced this.