Geekom has removed a malware-flagged LAN-driver installer from legacy support pages serving six AMD mini-PC families after independent researchers found the Asruex backdoor inside the package. The affected models are the A7, A8, AE7, AE8, AX7 Pro and AX8 Pro. [1]
VideoCardz said it downloaded the archive directly from Geekom and checked the executable with VirusTotal, FileScan.IO, MetaDefender and YARAify. The report identified the file as Install_PCIE_Win11_11.10.0720.2022_11222022.exe and said reports involving the same hash dated back to December 2024. [1]
The available evidence establishes that the installer was distributed through Geekom’s website and detected as malicious; it does not establish how many people ran it or confirm a successful compromise. The package was a downloadable driver, rather than software preinstalled on the affected computers. [1] [2]
Geekom said the older support page had been replaced but remained accessible through engines. It has removed the legacy files and said its current driver pages showed no similar issue. For anyone who ran the installer, a clean Windows installation is the company’s strongest precaution; at minimum, users should run a full scan and replace the network driver from a trusted source. [2]
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
