Strange UEFI malware ESET Internet Security detection

[yard2018]

My ESET Internet Securrity v19 detected 4 threats in UEFI

Translation: 

1. Protokoly → Logs
2. Skenovanie zariadenia (1) → Device Scan (1)
3. Čas → Time
4. Skontrolované priečinky → Scanned Locations
5. Detail hlásenia:
   • Čas: 16.03.2026 11:28:06 → Time: 16 Mar 2026, 11:28:06
   • Skontrolované priečinky:
     → Scanned Locations:
     • Operačná pamäť → System Memory
     • C:\Zavádzacie sektory/UEFI → C:\Boot Sectors/UEFI
     • D:\Zavádzacie sektory/UEFI → D:\Boot Sectors/UEFI
     • G:\Zavádzacie sektory/UEFI → G:\Boot Sectors/UEFI
     • H:\Zavádzacie sektory/UEFI → H:\Boot Sectors/UEFI
     • *C:, D:, G:, H:* → C:, D:, G:, H:\ (Local Drives)
     • Databáza WMI → WMI Database
     • Systémová databáza Registry → System Registry Database
6. Skontrolovaných: 1298028 → Items Scanned: 1,298,028
7. Detegovaných: 4 → Threats Detected: 4
8. Vyliečených: 0 → Threats Resolved: 0
9. Stav: Ukončené → Status: Completed

I wrote ticket to ESET sdupport, but they not found any issues in files and OS. They suggested this solution:

https://support.eset.com/sk/kb6567-eset-deteguje-skodlivy-kod-v-uefi

I have latest BIOS flashed. 

How can I solve this issue? 

Thanks

[Bill_To]

Greetings @yard2018 

It sounds like a false positive detection by Eset if you submitted the files to Eset for inspection.

And Eset determined the files were clean.

If you want peace of mind you could have a local PC Electronics Tech reprogram the MB firmware using a Serial ISP Programmer.

You would probably also want to back up data on the system drive before reprogramming the BIOS. Then immediately reinstall the operating system after flashing the BIOS.

Or restore a known good OS backup if you do offline system image backups.

Again, Eset seems to be indicating the malware detection might be a false positive.

Regards

[yard2018]

@Bill_To:  I think is false and I will not reflashing  EPROM, this is insane. ESET not describe which type of malware detected, and this look all is not only in UEFY, but scanned  hard drives too..    All is hacked? 🙂 by who?   RU, CN, US hackers?  Mad. 

Is exist some  low level HP UEFI or  HDD BIOS scaner? Or it is impossible scan if UEFI or HDD BIOS is infected? 

[Bill_To]

Greetings @yard2018 

I don't know if HP has a low level EFI scanner.

It's very difficult to detect and remove malware embedded in MB firmware.

Did you rescan the system using Eset: Advanced scans>Custom scan>in-depth scan>Scan as an administrator to check if the malware is still present?

I can only suggest checking to see if the Bleeping Computer Security Forum can help.

Regards