A storage system includes at least one processing device comprising a processor coupled to a memory, the at least one processing device being configured to determine two or more storage servers accessible to the storage system and to conduct a virus scan by iterating through the two or more storage servers to scan files stored in a plurality of file systems of the two or more storage servers. Iterating through the two or more storage servers comprises selecting one of the storage servers, identifying the file systems provided by the selected storage server, committing the identified file systems to a plurality of antivirus servers coupled to the storage array, scanning files in the committed file systems utilizing the plurality of antivirus servers, and, responsive to completing the scan of files in the committed file systems, selecting another one of the storage servers and repeating the identifying, committing and scanning.