There are certain batch and init files that are executed at the system start. Here are a few of them:
- c:autoexec.bat
- C:Windowswininit.ini
- C:Windows\winstart.bat
The malware places its absolute path in these files and it automatically executes at system start.