Privacy issues (Score 1)

As a admin of a domain that usually receives about 10K mail a day, and with the sobig outbreak nearing 200000K emails/day, i would say that i can collect a very nice collection of email addresses that i got virus notifications from (since the sender address is forged to one of my domain) by looking at the logs, and if a was a malicios person, i could use that to spam them, or worse.

The virus notifications disclose your private email address, without telling you about that. This should be the button to push at the antivirus vendors and users so they would disable these notifications