A program or utility used to construct malware.
Disinfection & Removal
When searching our Virus Descriptions database for a specific program (e.g., Constructor:W32/Example.A), you may be directed to this page if the overview below sufficiently describes the program.
Alternatively, you may be directed to this page if no description matching that specific query is currently available. You can submit a sample of the suspect file to our Response Lab for further analysis via:
A Constructor is a virus creation toolkit used by malware authors to assemble malware from prepared 'building blocks' of code. Such programs allow users with little technical knowledge to easily create a complex polymorphic malware. The most famous Constructors are VCL, SennaSpy, BWG, PS-MPC, TPPE and IVP .
Constructor kits come with a variety of options, ranging from very simple to very sophisticated. A typical kit is very easy to use, as it eliminates the need for programming knowledge and skills. A user can create malware simply by selecting the features desired.
A Constructor kit's ease of use is demonstrated by an incident in which an unknown person created more than 15,000 viruses using a constructor and sent them to antivirus companies. Fortunately, because the malware produced from these programs uses a finite set of code blocks and known polymorphic engines, they can be detected using Generic Detections.