I've been so barraged by the #&%@ thing, I should 
know. (Thankfully, I have a firewall and virus 
protection that catches it every time.) It will 
take an address from on your computer to be a 
sender's address, and it harvests stuff for a 
subject line much the same way.

So the person that the message looks like it came 
from didn't send it. Getting a message like that 
doesn't indicate that person's computer is 
infected either.

Many Sharp Smiles,
--Drac