Q: "Does Salesforce scan uploaded files for viruses?" 

A: No, alas. And I haven’t found a third-party app that specifically does that, either. I suggest (1) installing one of the usual suspects and (2) voting for this.