These were almost always Trojans . The "story" for most real people was simply that they downloaded the tool to be a "hacker," and instead, their own computer was infected with a remote access trojan (RAT) or ransomware , giving someone else control of their machine.
In reality, files named Virus_Maker.rar or VirusMaker.exe were very common in the early-to-mid 2000s on file-sharing sites. virus maker.rar
As soon as the user tries to "build" a virus, things go wrong. Instead of creating a file to send to others, the program begins to display personal information about the user—their address, live webcam feeds, or photos of them sitting at their desk from that very moment. These were almost always Trojans
The user ignores their antivirus warnings, which flag the file immediately. They assume it's a "false positive" because, naturally, a virus maker would look like a virus to security software. As soon as the user tries to "build"