Actually, that's an issue that I had with virtuallythere.com with reservations on various airlines.

The reservation confirmation email sent to your friend by Aeroflot includes a link to virtuallythere.com that works just great. I just tested this with a reservation on Aeroflot I have - using the link in the email works, access through the website not

It seems to me that this is a strange security feature of virtuallythere.com, rather than an Aeroflot issue.