It definitely sounds as though her email has been hacked and someone is sending spam to her contacts. I'm guessing I had basically the same message but having read your question and seeing her name in the header in my spam folder, I deleted it without opening.

This type of spam has been making the rounds again and again over the past few years.....think you're safe to hit 'delete' and be done with it. <img src="http://www.traveltalkonline.com/forums/images/graemlins/handshake.gif" alt="" /> <img src="http://www.traveltalkonline.com/forums/images/graemlins/handshake.gif" alt="" />