Disguised e-mail source

We are having a discussion about the identity of a sender on an infected e-mail.
Experience would indicate that somehow a virus mechanism disguises a sender so that the recipient is led to believe that a sender has a virus sending out e-mails. In fact the sender is elsewhere.
Can anybody shed light on how this is achieved?