so many of the viruses and trojan horses etc these days "spoof" - the address of the "sender" is rarely the user of the computer that sends out the e-mail.

Some of the newer ones take random messages from the mailbox on the infected computer - complete with title and then send them back out with virus attached - others just grab a title from the mailbox -