Typical header mail address spoofing Bob.
Google finds many references.
http://www.symantec.com/avcenter/venc/data/w32.netsky.p@mm.html
Edit… Sorry url wouldn’t display properly, so it’s copy/paste