The email was to the following site, which was sent to my friend by somebody else, and that alone is suspect. I looked the virus up, and the virus happens to be right around 2 years old, which means it isn't a new virus contrary to what my friend claimed, from his AV Source, which is Symantec.
snopes.com: 'Postcard from a Family Member' virus
People must think I'm awfully dumb to fall for this.
What alerted me that this smelled fishy, was that it didn't come from a legit antivirus vendor.