Normally, a Windows program's setup wizard asks where and what to install on the computer before the program begins to install. Installation doesn't begin until the user confirms by clicking on the Install button.
However, this made me wonder: could malware writers abuse the standard setup wizard process by installing programs on the computer before the installation settings are confirmed or if the setup wizard is aborted? This could be worrisome, since opening a setup wizard requires admin privileges.