I tried to be careful with this thread as to not get it locked. It is legitimate research for a computer security class. The worst I've ever done to someone through the use of a trojan whom I didn't know was leave them a text document on their desktop stating: "You've been hacked! haha, no not really, but you should fix your system's vulnerability, blah blah".
Hey Gator, email spoof yourself, its incredibly easy. (dunno if you can do it on gmail or hotmail due to some relay check thing)
Just as a side bit of information, a month or so ago my friend tracked down a virus on his systems to being IN his router. (I think it was a DLink) A firmware upgrade cleaned out the virus. After some internet research, he discovered that the virus was actually being sent out by WOW (his cable service). A similar issue happened to me when Time Warner was sending code red to customers. WOW won't say anything on the issue, but many ppl were pointing to a different DNS that would avoid receiving the virus.