The "Paypal" variant is a worm
The subject came up a couple of days ago, in the miscellaneous discussion area of one of the writer's websites I frequent. Somewhat ironic, in that it's a "pay-to-play" site which accepts PayPal...
Anyway, someone there posted this link to a UK website.
Here's Symantec's page about it.
