attackers can check if a virus scan would detect the virus and change it until it passes the scans, so virus scans are not sufficient protection against dedicated attackers.

just because a virus scan did not find anything in a binary, that doesn't mean the binary is safe.