WikidPissah, don't rush too fast into the cognitive distortion trap of catastrophasizing. I work for an ISP (many years of experience) and can tell you that getting a spam email does NOT in any way mean that those are the addresses in an infected computers address book. In fact, the odds are against that because of the way spammers work. First of all, most accounts that are compramised use a spoofed email address. Spammers have TONS of different ways of getting email addresses. In fact, it would be more likely that your computer has some tracking software installed that picked up your T's address and that is why you got the email that looked like it came from your T. Not saying that is how it happened, but that is one of the ways spamming works. One of TONS and TONS and TONS of ways. I do this all day long with checking emails and seeing where things came from, and usually the bottom line is a combination of SOMEONE having an infected machine (rarely the machine name being spoofed - because that is the machine people first suspect and they spend too much time trying to clean it when that never had the problem at all), and people asking to be removed from lists (which just adds their real email address to a list that is sold to spammers).

So please don't rush into judging this poor T because he was the victim of spoofers.

Talk with your T about the event. That is the only way to get to the truth.