Periodic reminder. Don't open attachments that:
* come in unexpected email,
* are password-protected, &
* have its password in the same email it's attached to.
No anti-malware scanner along the way could open it to scan it before you got it. If it could, it would've blocked it as obvious malware.