If you get a message from DHL Express with the subject line "Notification for shipment," do NOT open up the tracking-delivery-notification Zip file.
This email did NOT come from DHL, and the attachment contains a virus.
I contacted DHL when I couldn't figure out why I had gotten the email, and got this response from their customer service folks:
DHL did not send this e-mail. DHL has no relationship with the individuals responsible for these fraudulent messages. The DHL Fraud Department is working to stop these messages and has reported the issue to the appropriate law enforcement agencies. This is fraudulent activity designed to place a virus on the receiver's PC.
Please do not reply to the e-mail or open the attachment. The e-mail should be deleted.
Please pass this on.