Who would be so dumb and open an email attachment from a sender he doesn´t know (if this weren´t a hoax) without scanning for virusses first?