Fake Email

[[TC]»Elmo«]

At a guess, it's some sort of xss type hack that gets your password.

All of these things require someone to click a link to compromise their email, otherwise they'd just read the address book and not need to bother sending the emails out in the first place.

Never click a link in an email that just says something like:
x has sent you a PM
hey, check this out
etc.
It's easy enough to work out where the link is pointing to and the url is usually fairly obvious when it's a fake or scam - it's often a misspelled known website or, as in this case, some random string of characters.

The ones I got came from an IP in Argentina, so whoever's doing it is probably connecting to hotmail via POP and using your password.