To make matters worse, often times when you get a Spam/Trojan email from "someone", it is not actually THAT someone that has been hacked. Often times, it is another person that was hacked and it used that third person's email address book to make it look like the emails were sent from them. IE: John Doe's email/PC got hacked, but Fred's email address was in John's system, so the Trojan is sent to look like it was from Fred and however many other email addresses it uses.