Typical header mail address spoofing Bob.

Google finds many references.

http://www.symantec.com/avcenter/venc/data/w32.netsky.p@mm.html

Edit… Sorry url wouldn’t display properly, so it’s copy/paste