Why would someone upload an image with a known virus? That's all a virus scanner would catch, but there's nothing to be gained from doing that.

If anyone seriously attempts to exploit this hole, they'd build their own exploit, which a virus scanner is useless against anyway.

I'm with tye on this one.