This sounds like a security issue. For access to the filesystem the runtime security level of the (Java) agent needs to be set to 2 or 3. You might also want to check the security settings in the server document, especially who's allowed to run unrestricted methods.
Is the file extracted if you run the agent on the server using a URL? (http://server/db.nsf/yourAgent?openAgent)
Mark