I tried what you said :
disabling BuddyPress did not solve the problem.
I search in the whole database thanks to PhpMyAdmin : no www-data.
and actually, you give the answer : this is the defaut Apache username.
So there was 99% chance that the message is sent by wordpress, and Apache put its defaut "from" because WP did not set any value for this field.
In the table "wp-users", I have only one user :
+----+------------+------------------------------------+---------------+------------------------+----------+---------------------+---------------------+-------------+--------------+------+---------+
| ID | user_login | user_pass | user_nicename | user_email | user_url | user_registered | user_activation_key | user_status | display_name | spam | deleted |
+----+------------+------------------------------------+---------------+------------------------+----------+---------------------+---------------------+-------------+--------------+------+---------+
| 1 | admin | # # # encripted-password # # # | admin | admin#@#blog-recette.com | http:// | 2008-11-22 12:57:19 | | 0 | admin | 0 | 0 |
+----+------------+------------------------------------+---------------+------------------------+----------+---------------------+---------------------+-------------+--------------+------+--------
(I just add the '#' in the adress, but the adress is good)
I have 2 users in the wp-signups .... which are the ones I desesperatly trying to create.