Trojaner in Gigabyte Control Center

[AndreasSRM 0]

Hello,

ESET NOD32 Antivirus detected a Trojaner in components of Gigabyte Control Center.

Here are the files found
 

c:\program files (x86)\installshield installation information\{964575c3-5820-4642-a89a-754255b5efe1}\setup.exe;BAT/Starter.NIG Trojaner;durch Löschen gesäubert;;D7C72089B6A63ABE37DD1C693659145DDACDA6DC;
c:\program files (x86)\installshield installation information\{964575c3-5820-4642-a89a-754255b5efe1}\setup.exe = INSTALLSHIELD = EasyTuneEngineService.msi;BAT/Starter.NIG Trojaner;durch Löschen gesäubert;;6240572178E59FFF88B0326D2640BF91BAF9FFC9;
c:\program files (x86)\installshield installation information\{964575c3-5820-4642-a89a-754255b5efe1}\setup.exe = INSTALLSHIELD = EasyTuneEngineService.msi = MSI = Data1.cab;BAT/Starter.NIG Trojaner;durch Löschen gesäubert;;A71AE0EC958F79C80742111D3B9FD61A170B5F51;
c:\program files (x86)\installshield installation information\{964575c3-5820-4642-a89a-754255b5efe1}\setup.exe = INSTALLSHIELD = EasyTuneEngineService.msi = MSI = Data1.cab = CAB = install.bat;BAT/Starter.NIG Trojaner;durch Löschen gesäubert;;1A79E698A2C4B4839D1EBCB6373A15070119862B;
c:\program files\gigabyte\control center\lib\mbeasytune\extsoftware\easytuneengineservice\updpack.exe;BAT/Starter.NIG Trojaner;durch Löschen gesäubert;;15B94CAA14E3821BFC6E448A1406A7869BBACA98;
c:\program files\gigabyte\control center\lib\mbeasytune\extsoftware\easytuneengineservice\updpack.exe = 7ZSD = EasyTuneEngineService/setup.exe;BAT/Starter.NIG Trojaner;durch Löschen gesäubert;;D7C72089B6A63ABE37DD1C693659145DDACDA6DC;
c:\program files\gigabyte\control center\lib\mbeasytune\extsoftware\easytuneengineservice\updpack.exe = 7ZSD = EasyTuneEngineService/setup.exe = INSTALLSHIELD = EasyTuneEngineService.msi;BAT/Starter.NIG Trojaner;durch Löschen gesäubert;;6240572178E59FFF88B0326D2640BF91BAF9FFC9;
c:\program files\gigabyte\control center\lib\mbeasytune\extsoftware\easytuneengineservice\updpack.exe = 7ZSD = EasyTuneEngineService/setup.exe = INSTALLSHIELD = EasyTuneEngineService.msi = MSI = Data1.cab;BAT/Starter.NIG Trojaner;durch Löschen gesäubert;;A71AE0EC958F79C80742111D3B9FD61A170B5F51;
c:\program files\gigabyte\control center\lib\mbeasytune\extsoftware\easytuneengineservice\updpack.exe = 7ZSD = EasyTuneEngineService/setup.exe = INSTALLSHIELD = EasyTuneEngineService.msi = MSI = Data1.cab = CAB = install.bat;BAT/Starter.NIG Trojaner;durch Löschen gesäubert;;1A79E698A2C4B4839D1EBCB6373A15070119862B;

I made a complete scan and it also dected the virus in some other Gigabyte files:

C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\install.bat - BAT/Starter.NIG Trojaner
C:\Windows\Installer\337dc.msi = MSI = Data1.cab = CAB = install.bat - BAT/Starter.NIG Trojaner

The virus "BAT/Starter.NIG Trojaner" was only found in Gigaybte related files.

Is it a false positive?

What does "BAT/Starter.NIG Trojaner" exactly. I didn't find any information about it.

Bye,
Andreas

[Marcos 5,252]

According to my findings, the detection should not be triggered. Are you positive that the files are still detected if you re-scan them? Unfortunately you didn't include the time of detection. You can restore the files from quarantine.