Yeah, this latest batch of viruses scans your hard disk for anything remotely resembling an email address. So things like pages in your IE cache or document files could be fodder. Ick.