I have gotten them from MYSELF on a weekend when none of my computers were on and I was 100 miles away.

The source is someone who has the spoofed return address in their cache or somewhere that the virus looks for fake return addresses.