UEFI Scanner
The Unified Extensible Firmware Interface (UEFI) Scanner is part of the Host-based Intrusion Prevention System (HIPS) that protects your computer's UEFI firmware. The UEFI firmware loads into memory at the beginning of the boot process. The code is on a flash memory chip soldered onto the mainboard. By infecting it, attackers can deploy malware that survives system reinstallations and reboots. The malware can also easily remain unnoticed by antimalware solutions as most are not scanning this layer.
The UEFI Scanner is enabled automatically. You can also start a computer scan manually from the main program window by clicking Computer Scan > Advanced Scans > Custom Scan and selecting the Boot sectors/UEFI target.
|
If your computer has already been infected by UEFI malware, read the following ESET Knowledgebase article: My computer is infected with UEFI malware. What should I do? |
