update simulate_virus_scan to copy and then remove the file

There are odd issues with move, seems that the file doesn't always move
in time, causing tests to fail - so we copy then remove, also skip
files which are not in the incoming dir.