I thought about that for a while and wonder if the virus could possibly be pulling email addresses from the internet cache on the infected persons computer. That would explain a lot of things.

Greg