Geekom accidentally distributed malware with mini PC drivers – the company apologizes to users

Geekom released an official statement saying that drivers distributed through the support website were found to contain malware. According to the company, the affected files were hosted on an outdated Geekom support page, which was not removed when the new system went live. The old page is no longer linked to the navigation on the Geekom website, but is still accessible via search engines.

Image source: Geekom

Geekom said it has checked the files currently available on the support page and found no similar issues. The company also clarified that the affected drivers are not included in the Windows installation files that come with the mini PCs. Geekom has removed the affected outdated files and pages and said it has strengthened its review and resource management procedures. The company did not disclose how the malware entered its servers.

For users who downloaded a network driver package affected by malware, Geekom recommends uninstalling the installer, performing a full PC scan, and reinstalling the network driver via Windows Update on the Realtek website or using the company’s current support page. As an extra precaution, it is recommended that you perform a clean installation of Windows using official operating system images.

“We recently received reports that driver files related to Geekom have been flagged by multiple security scanners […] We sincerely apologize. […] After a thorough internal analysis, we can confirm that the issue only affects older pages. There are no such anomalies on our current driver page, and this does not affect Geekom hardware or the pre-installed operating system on our devices. “We are currently removing the affected legacy files and enhancing our resource management and review processes to prevent these issues from reoccurring.” the company said.

Geekom also asked VideoCardz, which first reported the issue, to consider removing the article. VideoCardz editors felt it was unfair to remove their report, given the company’s confirmation of the presence of malware on its support site.