Sort:  

He need to contact me directly on steem.chat, as Gandalf

Short answer is: no.

Medium-length answer is: if you don't have control over some account it's not your account. At most it was. Once you leaked your password (as your friend did) you lost your account. To get some more idea about it you can read one of my posts: Memos, Keys and Passwords, Balrogs and Fields of Despair

Recovery from such situation is possible only during 30-day period since the key was changed after leak... and that's only after meeting series of strict conditions.

Your friend case is special because it was part of my research, so there's still non-zero chance.

Yeah, but what's the long answer? :D

Even more maybe-er-er? :D

:D

Long answer is 100x "Don't lose your password."