I doubt it...
from what I remember of those viruses they just search for any IP...
and it has to be from a machine with IIS running, most end-users don't run it...
just because your friend is connecting doesn't mean that virus would be trying to connect from his machine. It doesn't do anything like email viruses that send to a users list, it just searches for every web server it can find