For executing files people always need to confirm, (or have the 'always trust software from......'-box clicked) in order to execute the code.
Good thing, else virusses would install them self, and also those darn dialers.
You could make a <script>top.location.href="url/file.exe";</script> to skip the clicking, but people must still click on yes in the security screen.
And also Welcome to WebmasterWorld!