I work for the IT company that handles Ray Scott's network, including the Whitetail Institute. There are no viruses on the deernutrition.com network. The virus you speak of is bagle and it changes the from address so that it looks like it comes from one address when it is actually coming from somewhere else...
http://www.trendmicro.com/vinfo/viru...e=WORM_BAGLE.X

The email it sends out has varying subjects, message bodies, and attachment file names. It uses specific user names followed by the domain of the recipient's email address to spoof the From field. It sends two attachments. One of them is a picture of a girl in .JPEG format. The other attachment is a copy of this worm with any of the following extension names:

I hope this helps clear up things a little....