It stills begs the question, how'd they get my brothers address (it's an odd one involving numbers) and how did they get mine AND associate the two?
It's pretty typical virus behaviour - go to the email application and email to the address list: hence the link between you and your brother is the address book.
SD