The other day an address listed as coming from PayPal sent me a virus and it appeared to be actually coming from a PayPal email server. It was caught by the virus checker on my email system.
So I did the good citizen thing and reported it to PayPal so they would know and could look into it.
And they send me back a message stating something like:
"PayPal occasionally sends message to users...if you don't want these messages go into your preferences and change them..."
Sorry but I didn't see the option for "DON'T SEND ME VIRUSES".