Troj/PWS-Dafdaf is a password stealing Trojan.
It copies itself to C:\Windows and sets the registry value
SystemReg = C:\Windows\WINREG.EXE in both HKLM\Software\Microsoft\Windows\CurrentVersion\Run
and
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices.