Security Researches at CheckPoint Security found this 19-year-old exploit in WinRAR. The exploit lies in the ACE compression method, and can allow a victim extracting the archive to drop a malicous file in the users startup directory, executing it on next reboot.