Rogue, http://support-antivirus.web.cern.ch..._6/virus_6.asp .

Generally, the body of the email will give it away. If I'm suspicious, I just plop a line or two into Google and see what pops up. It looks more like automated worm activity than a deliberate target. I expect that the address is spoofed (email addy doesn't match source addy).