Written in Microsoft Visual C++, compressed with PECompact

more versions

dropped files:
liveup.exe    size: 35.328 bytes    (TrojanDownloader.Win32.Livup.b)
msstart.exe   size: 140.288 bytes   (TrojanProxy.Win32.Agent.s)

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "msstart"

tested on Windows XP
November 25, 2004