"so unless there's something malicious being set up immediately upon startup"

The majority of spyware and viruses will do this.