Discovery Date 08/14/2007
Detection was added to cover protection against a trojan originally called "lasoporP.exe" , having a filesize of 64.512 bytes.
The file is internally compressed with the upx packer.
The file was created using the msvb development tool.
The lasoporP.exe binary has a deceiving icon pretending to be a sub/folder.
Upon execution, it runs silently, no gui messages appear on the screen.
When the trojan is running, it is actually visible on the Windows Task Manager's Application tab, under "WindowClassFinderVbp. The name WindowClassFinderVbp alone might not be unique enough as such; it is a stong hint but can't be relied on by itself to determine if it's malicious or not The application can be killed manually. The same applies to the process. Viruscan is able to kill these but these days it's not often to see malware listed under the application tab therefore it might be an easy though not perfect check.
It may copy itself to deceiving file names like for example WINSYSTEM.EXE , WINDOWS.EXE , BOOTEX.EXE, LOG.EXE.