Definitely a scam. There are software programs in use by thieves, that will copy a user's entire contact list and begin sending junk mail to the members of the list. The messages appear legit because they appear to have originated from someone you know. One of my close friends, who actually had his contact list stolen, finally had to abandon his long-term email address in order to get stop the forged messages.
