there many malicious registry changes that malware can do
there so many locations like startup/network / others