Can Intruders use virus signatures to fabricate where an email came from?

Yes, intruders can use virus signatures to fabricate where an email came from. It is best not to even open an email unless it is from someone trusted or scanned with an antivirus software.