Troj/Delf-JM is a Trojan for the Windows platform.
When first executed Troj/Delf-JM copies itself to the Windows system folder with the filenames system32.exe and virus_system32.exe.
In order to be able to run when Windows starts up Troj/Delf-JM sets the registry entry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
ruin
"system32.exe"
Troj/Delf-JM also sets the following registry entry which runs the Trojan instead any EXE file:
HKCR\exefile\Shell\open\command\
@
"virus_system32.ex