Dude, I'm not saying you opened the attachments. You did everything right! I'm just offering my public service announcement to anyone else reading the thread.
I do network security for a living, so I can't begin to tell you how many users don't follow rules 1 and 2.
