Advice Request What is the securest utility for unzipping downloads?

[shmu26]

file archivers such as winrar and 7-zip are known to be exploitable.
what is the securest way to unzip downloads?
You don't really know what's inside until you unzipped it...

 

[37507]

Scan the zip files with OPSWAT Metadefender?

 

[Ink]

file archivers such as winrar and 7-zip are known to be exploitable.
what is the securest way to unzip downloads?
You don't really know what's inside until you unzipped it...

You mean you want to scan the contents before extraction?

Follow this to make Windows show Hidden File Extensions
How to configure Windows to show file extensions and hidden files - WinZip Computing :: Knowledgebase

 

[shmu26]

You mean you want to scan the contents before extraction?

Follow this to make Windows show Hidden File Extensions
How to configure Windows to show file extensions and hidden files - WinZip Computing :: Knowledgebase

thanks.
Virus total will give you better info if you upload after extracting, is this not so?
Also, how can you check the digital sigs before extraction?
that's why I am looking for a secure extractor. Which do you think is the best?

 

[Myriad]

file archivers such as winrar and 7-zip are known to be exploitable.
what is the securest way to unzip downloads?
You don't really know what's inside until you unzipped it...

I don't know of any utility that will do that for you ( that's not to say that there isn't one ).

I use this method for any downloaded zip:-

Upload to Virustotal and grab the checksum from there .
Calculate the checksum locally for your download and compare the two .
Run an on-demand scanner on the download if you like .
If all looks good I use 7-zip to extract the contents.

I don't know exactly how secure this method actually is , but it hasn't let me down so far .

 

[Ink]

You could extract under Sandboxie, but follow the Show Hidden Extensions so you are aware of the file type.

HaoZip
Zipware

 

[shmu26]

I like zipware. It makes the @Myriad method easier to do, too.

 

[Duotone]

You could extract under Sandboxie, but follow the Show Hidden Extensions so you are aware of the file type.

@Spawn beat me to it... another method is with WinRAR tool> Scan archive for viruses, then of course with Zipware.

 

[ForgottenSeer 55474]

I use PeaZip but I don't know how secure it is,it is a free tool.

 

[jamescv7]

I cannot tell about security enhancement, but you can try alternatives like BandiZip, WinZip and others.

Usually the main program is how to compressing within visible time.