Rick,

It probably isn't even on his computer. Probably the Klez virus, which steals e-mail addresses from other sources to disguise from whence it comes.

Kerry