Clues point to single MyDoom culprit