Tina, it didn't come via e-mail, at least it never showed up with my e-mails.
I have a Firewall, whenever there is an intrusion attempt, I'll get a little warning sign, and a click on button for more info. That's when I find out their IP address.
With my IP tracking device, I can give them the IP address, and it'll track it to where it's coming from. Even though this person sending the Trojan Horse is using UNet as their IP provider, it does give specifics as to "who" the Trojan Horse is coming from.
UNet could trace (with the info I'd provide) which one of their customers is sending out the Trojan Horse.