Or a stupid employee, wasn't there a version of the ILOVEYOU.vbs virus that would add that command to the autoexec.bat?