Windows 7: install.exe found on external drive - how do I find out what it is?

Only from a DVD/USB - its specifically designed this way to outsmart malware that requires booting into Windows to become 'aware' and then avoid detection, or hamper the malware detection process.

Okay... have run Quick Scan.... (full scan to follow ) Trojan found Win32/Sirefef

BUT... is not able to be removed with this message: Windows defender offline encountered an error: Error code Ox800704ec "This program is blocked by group policy. For more information contact your system administrator.

So.. how do I remove this file and what is it?

You can upload the install.exe file to VirusTotal
https://www.virustotal.com/
It will scan it and you may find more info on what malware is found in the file.

Hi.. we have tried that but when we try to upload it it says we don't have (administrator) permission to do so....

Is this a work computer?

It is a home computer on a 'home network' with two computers in total... connected by cable... they were bought form new and have always been used as home computers....

I 'think' I have managed to remove the Sirefef Trojan... from a link elsewhere on this forum... touch wood it has worked...

http://malwaretips.com/Thread-How-to...-Removal-Guide

Reboot your computer, and run an online scanning using this:

Free Online Virus Scanner | ESET

Just for a little information. This a very nasty infection.

Encyclopedia entry: Win32/Sirefef - Learn more about malware - Microsoft Malware Protection Center

Neil3205,

If Sirefef was found on your computer, your interests are well served by running tools that query/diagnose the system prior to Windows starting.

Although some programs may come up clean, malware could still be lurking somewhere, particularly if it is a Rootkit.


So, if you agree, let’s take a look before Windows starts, but, need some info from you:

Do you have the Repair your computer option in the Advanced Boot Options menu?


To find out:

Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until the Advanced Boot Options menu appears.
Is the Repair your computer option listed?


If you do not have the option, do you have your Windows installation CD/DVD available?


And last, do you have a USB flash drive available, and access to a clean computer?
　

I am running this on my own computer on our home 'network'... as earlier advice in the thread... I have downloaded Windows Offline Defender on a CD and changed the BIOS to boot via the CD and did the scan by that... (at least a quick scan).... I will run a full scan while I sleep tonight as I fear that might take a few hours... the last re-boot I did the Sirefef wasn't showing.... now running an ESET scan....