Troj/Dloader-WA is a downloading Trojan for the Windows platform.
Troj/Dloader-WA will download and execute files from predefined URLs to the following locations:
C:\windows\sstray.exe
C:\windows\svhost.exe
C:\windows\lcass.exe
C:\windows\winlog.exe
C:\windows\stat
C:\windows\tskmgr.exe
Troj/Dloader-WA will copy itself to the Windows folder and create the following registry entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
klop
<Windows>\<original name of executable>