[Trev]

on virii of that type, the "from" address is almost always drawn from the infected computers address book. So it most likely came from someone with both you and gg&j in their address books.