Cant really tell with the info provided. Both are possible, the spoofing is more likely if she doesnt have any email programs configured on the computer. Worm viruses will commonly use the infected user's contact list to spoof copies of itself. But she should run a virus scan (with updated virus data files =P) just to be safe.
|