MailPot is a small lab quality tool for capturing emails sent out by trojans and mass mailers. If they use Outlook automation, configure your Outlook client to use this server. If they connect to an open relay by domain name, use this in conjunction with fakeDNS to redirect them here. (In the event the malware is designed to perform a MX lookup on the target domain you may need to take other steps.)