Please try to download test virus from http://www.eicar.org/85-0-Download.html using http
If statistics won't show anything then please delete policy utm-security-policy
dlete security policies from-zone trust to-zone untrust policy utm-security-policy
create new utm-security-policy just for http,ftp and smtp
set security policies from-zone trust to-zone untrust policy utm-security-policy match source-address any set security policies from-zone trust to-zone untrust policy utm-security-policy match destination-address any set security policies from-zone trust to-zone untrust policy utm-security-policy match application [ junos-http junos-ftp junos-smtp ] set security policies from-zone trust to-zone untrust policy utm-security-policy then permit application-services utm-policy sophos-utm-policy set security policies from-zone trust to-zone untrust policy utm-security-policy then log session-close
create another policy to allow the rest of the traffic
set security policies from-zone trust to-zone untrust policy trust-to-untrust match source-address any set security policies from-zone trust to-zone untrust policy trust-to-untrust match destination-address any set security policies from-zone trust to-zone untrust policy trust-to-untrust match application any set security policies from-zone trust to-zone untrust policy trust-to-untrust then permit