The message may not be from Duke. I received a message from him this morning that was not infected. Then again it possible he was infected since then. Still, bet it is a virus that grabs other addresses to substitute into the "from" column.