No excuse for getting caught by that one. Who on earth opens an executable from an unverified e-mail address? What's more, an executable that's caught by, well,
most antivirus software.
Sorry you had to spend £150 to get rid of it. That's a high price to pay for someone else's greed