A Constructor is a malware creation toolkit that allows users with little technical knowledge to easily assemble a complex, malicious program from prepared 'building blocks' of code.
Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.
When searching our Virus Descriptions database for a specific program (e.g., Constructor:W32/Example.A), you may be directed to this page if the overview below sufficiently describes the program.
Alternatively, you may be directed to this page if no description matching that specific query is currently available. You can submit a sample of the suspect file to our Response Lab for further analysis via:
Constructors come with a variety of options, ranging from very simple to very sophisticated. A typical kit is very easy to use, as it eliminates the need for programming knowledge and skills. A user can create malware simply by selecting the features desired.
A Constructor kit's ease of use is demonstrated by an incident in which an unknown person created more than 15,000 viruses using a constructor and sent them to antivirus companies. Fortunately, because the malware produced from these programs uses a finite set of code blocks and known polymorphic engines, they can be detected using Generic Detections.
The most famous Constructors are VCL, SennaSpy, BWG, PS-MPC, TPPE and IVP.