Does there exist a UEFI-enabled boot time virus scanner that runs before control is transferred to the hard drive?

I accidentally left AVG shields off for a day, and executed a program that was later scanned as a trojan virus. Because of how rootkits work, I now don’t believe anything after the signed UEFI chain.