Bill-tax.zip: customs email with virus

An email that should come from customs, actually contains a virus, according to the security experts of Avira. The spam emails have the subject “Parcel requires declaration”.

Text of the email:

Good day, We have received a parcel for you, sent from France on July 9. Please fill out the customs declaration attached to this message and send it to us by mail or fax. The address and the fax number are at the bottom of the declaration form.
Kind regards,

Lucinda Addison

Your Customs Service

The attachment to the email has the name “bill-tax.zip”. Hidden in the archive is the Trojan “tr/Spy.ZBot.dkx”, cloaked as “Bill_Tax___________________________N89798742344.exe”. Careful: Windows shows the attachment as a Word-document.