[ChingChong]

Hi,
I will with remote console in trojan upload a miner and then infect a process with the miner.
as example
minername: jokerminer.exe
process to inject: winlogon.exe

C:\Users\mypc\Documents - in this path uploaded i the miner

in remote console i will given this commands:

first cd C:\Users\mypc\Documents
then jokerminer -n "winlogon.exe"

my question about this is now:

if by the next pc restart the winlogon will restart,will then my jokerminer with the winlogon start???
is the injected prozess winlogon after a pc restart infected or not and will start my miner too???

pls help me,