Have a friend who had his Outlook account hacked.  Claims they want $120 or $170 to fix it from Outlook.  That screams scam, so I am asking for him from another new account.  Is this legit as a response from Outlook?  Suggestions on how to correct it assuming it is a scam??

Apparently, his password and security questions were changed as well contact info.