Using compression utilities, is it possible to create an archive that when extracted, will place certain files in certain areas on a users PC?
For example, suppose if I wrote a virus or a malicious script, store it in a folder with other files, and zip that folder. When the user extracts the files to the provided location, they're unaware that the virus or malicious script is being copied to a system folder or somewhere deep in the C:
drive.
In other words, is it possible to trick compression utilities to extract files to a location not specified by the user?
How would you minimize the damage that can done?
I'm far from being an expert, but it would seem sensible not to extract anything under an Admin level account.