Do not open the attachement!
The virus appears as an attachment--"www.paypal.com.scr"--to an e-mail that claims to be from PayPal.
"PayPal would like to inform you about some important information regarding your PayPal account," the message reads. "This account, which is associated with the email address will be expiring within five business days. We apologize for any inconvenience that this may cause, but this is occurring because all of our customers are required to update their account settings with their personal information. We are taking these actions because we are implementing a new security policy on our website to insure everyone's absolute privacy."
When you open the e-mail attachment, a window appears bearing the PayPal logo and asking for credit card information. The virus stores any information provided by the victim in a file called "ppinfo.sys" and the file is sent to four e-mail addresses stored in the program.