All. Salesforce does not include inherent virus scanning for content or attachments.

Desktop virus scanners or BYOD installations do not cut it for Salesforce, especially if using communities or sites. 

If you'd like to understand the full vulnerability of your environments, download this Salesforce Query script and instructions and you'll see the number of attachments and content that may be carrying viruses. If you're running multiple environments, you'll have to run it on each, and pay attention to the date parameters in the script. If your environment has more than 50k attachments, it will time out (due to Salesforce limitation), so you'll have to contact Adaptus.com to request assistance with the assessment.

We're working on a cloud-based tool to run this for our customers/prospects. In the meantime, download the query instructions and let us know if you'd like to discuss further.

DOWNLOAD DOC HERE>>https://adaptus.com/salesforce-content-query/