You should be able to look at the Full Header and see the real source for these, even if someone is sending them with spoofed return addresses. For instance it would say it came from me (like the one I got from myself) and the full header showed it came from "leedoreenjim@aol.com"

That might give you a clue?

Happy hunting. I have been spending the whole day, at least since 10 AM trying to get all the garbage off my Mothers computer. SO far I removed Klez which was in 19 files and memory, now I've upgraded the computer to WIN98 and I'll install Norton. Her system was just loaded with things running in backgound, to the point it would not run FreeCell (her favorite computer use) and scandisk wouldn't even run.

All she does is get mail from relatives, but some virus got through. Now she is protected and I get a couple days of my life back, where I would otherwise be de-bugging her computer. What a mess!