Torvel

Torvel is an Internet worm that spreads through file sharing networks and by e-mail in messages with infected attachments. The spyware sends malicious letters to addresses it finds in the computer. It doesn't depend on a particular mail client, as it contacts local mail server directly. Torvel creates infected files with meaningful names and drops them into shared folders of Kazaa, ed2k-it and Xolox peer-to-peer softwares. This is done in order to trick other users into downloading and executing such files. The worm runs on every Windows startup. It doesn't carry any destructive payload.