Is it a virus alert or a suspicious email warning?
If suspicious email warning, have her lower the heuristics sensitivity, there is likely to be white space in subject, iframe tag in HTML format email or something that the heuristics is picking up if the email is infact not infected.
You could ask the person to send you an email, to see if you can identify the cause.