eximstats figures include everything the mainlog tells it that it has
received and/or delivered.
So virus emails will show up in the 'senders' lists, but (from your
description) probably not in the 'receiving' lists. It is dependant upon
how your virus software works. Some work by cleaning the emails and then
re-injecting them into the mailqueue so they show up twice!