Hi, thanks for the speedy responses. I re scanned the entire disk since last time I ejected it as soon as I saw the alert and this is what was found.
Trojan:Win32/Tiggre!rfn (The "r" was a typo)
Windows Defender is what detected it which I find funny cause I've never seen it detect anything before. As far as version, it's not the latest. It's a fresh reinstall on a newer pc I built using an older Windows version 10.0.18362 installer disk. I hadn't even connected to my network yet to update since reinstall.
The disk he sold me is Version 15.2 Edition 1.1. Maybe false positives since HBCD does have some hacking type tools in it and I am using outdated Anti-virus version? However, I also have another copy of the same version that I burned myself later using the ISO I downloaded straight from official website and neither of these three files exist. I double checked myself, comparing the two disks. I also scanned the disk I burned myself and Defender didn't detect anything.
He has ended the exact listing of the disk I bought so the link no longer exists but he's relisted what looks like the same exact disk in a new listing. The label looks exactly the same. When I go to my purchases in eBay the one I bought is grayed out. Here's the link to the current listing.
I can also provide a screenshot of it in my eBay purchases proving I purchased it if needed. He sells lots of software including some related to hacking I noticed.
I don't want to notify eBay until I know for sure that my suspicion is confirmed. This is why I'm asking for your help first as I'm far from an expert. Also this way I have some backup so eBay doesn't just dismiss me as some nutcase. Any other information you need, just let me know and I'll provide all that I can. If I am right, I want to nail this jerk for it. Selling software with hidden cryptocurrency trojans is a real scumbag thing to do. I wonder how much Bitcoin he's made off all the pc's he's enslaved.