The view source.
<!-- probably be automated with 'drag and drop' or execCommand('paste'); if you try hard enough, no time for this rubbish -->
http://www.malware.com/wattadrag.html
Drag and drop the little icon and it appears in your startup folder.
Similar things are done automaticly all the time.