Yes, I got one last week and notified (via text msg) the provider, verifying that it did not come from her. Of course I did not click on the link.
First you do a virus scan and make sure your computer is clean. Then you change your account password. And quit going to those nasty, virus-ridden sites.