: This is a mass mailer worm that sends itself as a message from PAYPAL.COM. It attaches a file PAYPAL.ZIP, containing the worm installer, to the mail.
Details
: Upon execution, the installer downloads the actual worm from www.aquarium-fish.ru/ppapp.bin and executes it.