
install some antivitus software on your farm (e.g. here you may find list of compatible antiviruses for SP2013. Most probably most of them also have version for SP2016 nowdays: Antivirus and SharePoint 2013) and enable it in Central administration: SharePoint 2016 Central Admin - Security - Manage Antivirus Settings so it will scan documents on upload and/or download.