Likely just 1 source
Klez is a sneaky bugger. It has it sends out e-mail disguised like they come from addresses in your address book. Right click on the message, hit options, then you'll be able to see who is really sending it. This works for Outlook, not sure about other programs.
-Steve G.