DHL/UPS Mails inkl. Trojaner unterwegs

Received-SPF: fail (server: domain of lightsoul.com does not designate 201.63.158.114 as permitted sender) client-ip=201.63.158.114; envelope-from=grudginglyr@lightsoul.com; helo=201-63-158-114.customer.tdatabrasil.net.br;
Received: from 201-63-158-114.customer.tdatabrasil.net.br (unknown [201.63.158.114])
    by server.com (Postfix) with ESMTP;
    Mon,  1 Feb 2010 13:23:34 +0000 (UTC)
Received: from 201.63.158.114 by dev.null; Mon, 1 Feb 2010 10:22:27 -0300
Message-ID: <000d01caa341$995a8ad0$6400a8c0@grudginglyr>
From: "DHL Support Hector Coker" <delivery @dhl.com.au>
To: < ****@domain.ltd>
Subject: DHL Services.  Get your parcel NR.5807
Date: Mon, 1 Feb 2010 10:22:27 -0300
MIME-Version: 1.0
Content-Type: multipart/mixed;
  boundary="----=_NextPart_000_0006_01CAA341.995A8AD0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2314.1300
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300

</delivery>

Dear Postmaster,

the message with following attributes has not been delivered,
because contains an infected object.

Sender = grudginglyr@lightsoul.com (may be forged) Recipients = ****@domain.ltd
Subject =  DHL Services.  Get your parcel NR.5807
Message-ID =  &lt;000d01caa341$995a8ad0$6400a8c0@grudginglyr>

--- Dr.Web report ---
Following virus(es) has been found:
Known virus(es):
Trojan.Botnetlog.zip

Dr.Web detailed report:
127.0.0.1 [9275] drweb.tmp.K8Hjnr - archive MAIL
127.0.0.1 [9275] drweb.tmp.K8Hjnr/[text:plain] - Ok
127.0.0.1 [9275] drweb.tmp.K8Hjnr/DHL_document_Nr9274.zip infected with Trojan.Botnetlog.zip

Dr.Web scanning statistic:
Known viruses : 1

--- Dr.Web report ---

The original message was stored in archive record named:
drweb.quarantine.Wxd8tY