Troj/Dloader-JP is a downloader for the Windows platform.
Troj/Dloader-JP will attempt to download and execute files from http://xawm.biz. The Trojan will also drop the following files:
<Windows system folder>\spoolsrv32.exe (detected as Troj/Dloader-JP)
<Windows system folder>\ssrpcsrv32.dll
<Windows system folder>\stxfdb32.dll
<Windows folder>\Web\desktop.html (harmless adware file)
Troj/Dloader-JP will create the following registry entries:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
Srv32 spool service
"<Windows system folder>\spoolsrv32.exe"
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
Srv32 spool service
"<Windows system folder>\spoolsrv32.exe"