Keep in mind, if it's the Klez virus, it's probably not being sent from the person in the "reply to" field. This particular virus puts bogus (but valid) email addresses in this field, making it particularly difficult to track down the actual sender.