Malicious submissions should not be available for download in Submission Review or OR

[rakibansary]

Submissions that are flagged by av-scanner-service as infected are still available for download in submission review. Additionally it looks like for infected files no email notification saying the submission is infected is sent out.

[rakibansary]

@lakshmiathreya

1. I'll check/confirm if there's a proper email template available for malicious submissions. Generally for good files, an email with a review score of 100/100 is sent out. For a bad file, I only received an email saying a review type of "Virus Scan" was performed on the file, but no final update was given.
2. Should there be any mechanism to mark/keep track of users who upload malicious files?
3. What's the expected behaviour after detection of a malicious file? Not show it at all in Submission Review or show the file name, but not make it available for download?