Malware found on the official GEEKOM driver download website

Malware found on the official GEEKOM driver download website

The Chinese brand GEEKOM, known for its extensive catalog of mini PCs (and the occasional laptop), has been involved in a serious controversy after it was detected that they were offering LAN network card drivers with malware from your own website. Specifically, the drivers with malware affected the models GEEKOM A7, AE7, AX7 Pro, A8 and AX8 Pro.

The viruses contained in the files were detected by different antiviruses as “Win32/asruex.A” Trojans with the ability to execute commands remotely from a potential attacker.

At the time of writing, GEEKOM has already removed the drivers with viruses and has published a new version without malware. In addition, the company has published a statement on its website where they try to provide an explanation for what happened, where they make excuses for “old pages” on their website, but do not indicate how they managed to upload a driver with malware to their servers.

Below we publish it translated:

GEEKOM statement about malware in its drivers

“We have seen recent reports that a driver file associated with GEEKOM was flagged by several security scanners, and we take these concerns very seriously. We want to sincerely apologize.

This issue traces back to an obsolete resource that we did not remove from our old pages in a timely manner, and we are sorry for the concern and inconvenience this has caused our users and the community at large.

Following a thorough internal review, we can confirm that the issue is limited to old pages.

Our current driver pages do not show any such anomalies, and this does not affect the GEEKOM hardware or the operating system preinstalled on our devices.

We are currently removing the affected files and strengthening our resource management and review processes to prevent this from happening again.

If you have already downloaded or run this file

If you previously downloaded the affected network driver package, we recommend the following steps as a precaution:

  • Do not run the flagged installer and delete any copies you may have saved locally.
  • Run a full scan with Windows Security (Microsoft Defender) or another trusted anti-malware tool.
  • Reinstall your network driver from a trusted source—via Windows Update or the official Realtek website—or use the updated package from the official GEEKOM website.
  • For complete peace of mind, you can perform a clean installation of Windows using the official Microsoft image.

If you need assistance, please contact GEEKOM support at support@geekompc.com and our team will help you directly.

Please note that since this refers to a downloadable driver file rather than the pre-installed system on your device, simply owning a GEEKOM mini PC does not mean that your system is affected.”