I've not been told anything about how the AV scan on attachments works, so I have no idea why either.
I've seen many posts with "(Virus scan in progress ...)" yesterday. Since the migration from the old platform is still in progress, I assume that it's a temporary issue, i.e. an overload for the virus scanner. Even small .png files took a long time.