Threat Description

Constructor

Details

Aliases: Constructor, Virtools
Category: Malware
Type: Constructor
Platform: W32

Summary



A Constructor is a malware creation toolkit that allows users with little technical knowledge to easily assemble a complex, malicious program from prepared 'building blocks' of code.



Removal



Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details



When searching our Virus Descriptions database for a specific program (e.g., Constructor:W32/Example.A), you may be directed to this page if the overview below sufficiently describes the program.

Alternatively, you may be directed to this page if no description matching that specific query is currently available. You can submit a sample of the suspect file to our Response Lab for further analysis via:

About Constructors

Constructors come with a variety of options, ranging from very simple to very sophisticated. A typical kit is very easy to use, as it eliminates the need for programming knowledge and skills. A user can create malware simply by selecting the features desired.

A Constructor kit's ease of use is demonstrated by an incident in which an unknown person created more than 15,000 viruses using a constructor and sent them to antivirus companies. Fortunately, because the malware produced from these programs uses a finite set of code blocks and known polymorphic engines, they can be detected using Generic Detections.

The most famous Constructors are VCL, SennaSpy, BWG, PS-MPC, TPPE and IVP.






SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More