Don't open attachments you weren't expecting, even from an email address you recognize.

I got an attachment containing a virus from the email addy of the people who host my email! O.O It was a virus pretending to be them.