Are ticket attachments scanned for viruses?

Yes. Uploaded attachments are sent through a malware scanner before they are made available; common image formats (such as standard picture files) skip the scan step. If a file is still processing, it becomes available once scanning completes.