Helping people with computers... one answer at a time.

Email accounts don't get infected with viruses... but they can be the delivery mechanism for viruses that then infect machines. Learn the difference.

In the article, "My mail account has a virus. How do I get rid of it?" you wrote "email accounts do not get infected with viruses."

But in this link [a link to a PC magazine article], it says, "An email virus arrives in someone's inbox as an executable attachment or link. If it manages to launch without getting caught by the anti-virus it quickly goes to work by replicating itself. The virus' activity can generate a flood of undeliverable mails and warnings back to the victim's email account, a flood that would reveal the virus' presence."

Am I reading the above correctly? It seems to claim that an email account gets infected. Also if an email account shows email in the Sent folder that the victim didn't send, does that mean virus spoof or what? Thanks for your time and your consideration.

In this excerpt from Answercast #28, I look at the way email accounts deliver viruses to machines and the fact that the email account itself isn't infected, although it may look like it is!

Email account with virus?

I stand by my statement, "Email accounts do not get infected."

Email accounts live on email servers and they are simply repositories (databases, if you will) for files. Some of those files might be viruses, but because they are in the database of an email server doesn't mean they've actually infected the server.

Email accounts as delivery mechanisms

What the PC Magazine quote you've given me describes is the fact that:

  • The email contained a virus

  • That it was downloaded to your PC

  • And it was run

It was run on your PC and it's your PC that then gets infected.

So, it's not the email account at all. The email account is simply a delivery mechanism, if you will. It's a way for transporting a virus from one place to another. The place the virus infects is it's final destination: your computer.

Hacked accounts

Now, if you find a bunch of emails in your sent folder that you didn't send, that could imply that your machine is infected.

  • More often than not, what it really implies is that your email account has been hacked.

That doesn't require your PC's participation at all.

Your PC might have an infection... and of course, it's well worth scanning and making sure that it does not. But most of these cases where email shows up in sent folders – in online email accounts – all that really means is that someone, somehow hacked or otherwise acquired your password.

They have logged into your email account (from somewhere else on the internet) and used your email account (usually via its web interface) to start sending out spam. They didn't bother to delete what they sent from your mail folder; therefore, you'll find it there later.

Someone is using your account

This can sometimes happen on PCs. But right now, today in 2012, it's more common (much more common) that the kind of email compromise that we're seeing is email accounts that are getting hacked into.

This means nothing more than that someone you didn't authorize has the password to your email account. In which case, I will immediately point you to the: Email Hacked? 7 Things You Need to do NOW! article, which describes the steps you need to take to secure your email account immediately.

Article C5500 - June 21, 2012 « »

Leo Leo A. Notenboom has been playing with computers since he was required to take a programming class in 1976. An 18 year career as a programmer at Microsoft soon followed. After "retiring" in 2001, Leo started Ask Leo! in 2003 as a place for answers to common computer and technical questions. More about Leo.

Not what you needed?

Comments on this entry are closed.

If you have a question, start by using the search box up at the top of the page - there's a very good chance that your question has already been answered on Ask Leo!.

If you don't find your answer, head out to to ask your question.