[The Alchemist]

I dont think anything can be done to overcome that.
Instead of naming it server.exe or something like that, name it something like install.exe or a less suspicious name.
Or maybe use an icon changer.

If you're protecting the RAR file with a password, tick the checkbox that says "encrypt file names". Then the user won't be able to view the files without password. That may be of some help.