Many viruses are triggered when an unsuspecting user clicks on an attachment (often Visual Basic), thinking it's something nice from a friend or colleague.

CNN: Technology - Analysis: Understanding viruses