install.exe found on external drive - how do I find out what it is?

Page 1 of 4 123 ... LastLast

  1. Posts : 109
    Windows 7 32 bit
       #1

    install.exe found on external drive - how do I find out what it is?


    Can anyone help?

    My computer was accessed via remote access scammer 2 nights ago and although my computer has been checked any appears to be safe - (microsoft checked) - my partner has a computer on the same home network and her computer now has (2) 'install.exe' files that have appeared on her external hard drive within folders with names such as 080eb699a612b22018 and f9e359c6c3f913d19353. An additional folder appeared last night They seem to have appeared at about the same time that my computer was remote accessed via the escammer. The files won't allow to be deleted as message saying they can only be deleted with admin access although my partner is the only user and has admin access. Have run Malwarebytes, spybot but files remain. Computer now has Microsoft essential with firewall.

    Two questions.

    1. How do we know what the install.exe is and if it is malcious hacking or simply system file?
    2. How do we remove it if it is malicious?
      My Computer


  2. Posts : 19,383
    Windows 10 Pro x64 ; Xubuntu x64
       #2

    Hi,

    These files should be considered malicious - do not attempt to run them.

    Please follow the instructions here:

    Windows Defender Offline

    Regards,
    Golden
      My Computer


  3. Posts : 109
    Windows 7 32 bit
    Thread Starter
       #3

    Thanks for reply so quickly


    Thanks for replying so quickly...
      My Computer


  4. Posts : 19,383
    Windows 10 Pro x64 ; Xubuntu x64
       #4

    No worries - let us know if you need more help.
      My Computer


  5. Posts : 109
    Windows 7 32 bit
    Thread Starter
       #5

    Would a system restore be advisable to a previous date?
      My Computer


  6. Posts : 109
    Windows 7 32 bit
    Thread Starter
       #6

    also.. is it advisable to try to change permissions to try to delete them? AND is it like that these install.exe files already placed spyware etc on the computer?
      My Computer


  7. Posts : 19,383
    Windows 10 Pro x64 ; Xubuntu x64
       #7

    Hi,

    These files reside on the external drive correct? I would let Windows Defender Offline do its scan before attempting anything else.

    A System Restore would only be good if the system was infected - lets see if that is the case using Windows Defender Offline.

    Regards,
    Golden
      My Computer


  8. Posts : 109
    Windows 7 32 bit
    Thread Starter
       #8

    okay many thanks...

    can I ask what this does and how this is different to the 'defender'?

    Free Malware Removal Tool | Anti-Malware Scan Software
      My Computer


  9. Posts : 19,383
    Windows 10 Pro x64 ; Xubuntu x64
       #9

    The offline version boots and runs from a DVD without requiring a boot into Windows - this way it is immune from any smart malware that that tries to inhibit scanning from within the Windows environment.
      My Computer


  10. Posts : 109
    Windows 7 32 bit
    Thread Starter
       #10

    final question.. does the defender HAVE to be saved to a CD/USB or can it be run from being installed on the computer itself?
      My Computer


 
Page 1 of 4 123 ... LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 17:04.
Find Us