Seven system recovery programs contained what amounted to a backdoor for injecting any untrusted file into the system startup process.
Source: htdarkreading.com