W32/Agent.Enu.Dropper is a Trojan that will infect Windows systems.

The Trojan will arrive as a dropped file of another malware or may be downloaded from the Internet.

Upon execution, it drops as fservice.exe, winkey.dll, reginv.dll, sservice.exe in the Windows System folder and services.exe in the Windows folder.


It modifies the registry at the following location to ensure its automatic execution at every system startup:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

More information can be found at this Proland Software page.