After skipping over the Easter holiday, the crew behind the Zhelatan Worm decided to pump and dump their spam for April Fool's Day.

The latest filenames being kickme.exe, foolsday.exe and funny.exe.

When executed the files "aromis.exe" and "aromis.config" are created in the windows directory.