Right. Remember that viruses these days randomize their addresses (both sending and receiving) based upon random scans of ascii text on the infected user's hard disk. Someone had that address on their hard disk when they were infected with the virus. It doesn't even mean that an empeg user is infected, it means someone with that name someplace on their hard disk (including the web browser cache) got infected. You have no way of tracing the user based on that address, so it doesn't even do any good to reply to the email and say "you are infected" because that's not who sent it. So there's nothing useful you can do except delete the email and forget about it.