Thanks for reminding me of this possibility.
Here’s how I plan to solve it on my seedbox:
In the bash script I use to download and rename files using filebot, I added an mkvalidator step at the beginning. If the file doesn’t pass the check, it doesn’t go onto the next step.
mkvalidator
mkvalidator is a simple command line tool to verify Matroska and WebM files for spec conformance. It checks the various bogus or missing key elements against the EBML DocType version of the file and reports the errors/warnings in the command line.
Good question! Perhaps not. Someone should test my idea with a known infected mkv file.
Get back to me if you do.