Foolestroupe -

The "password protected" attachment, with the password in the text of a message, was a fairly popular gimmick a few months back. By requiring a password to open the email, some AV programs were prevented from seeing that it contained a virus. The "permission" you give, by entering the password, can also bypass normal AV protections, since you have the "authority" to override the AV to "install" any program you want to.

More commonly now, entering the password just misdirects you to a malware site, where they can download trash on you. Both "methods" pop up occasionally.

DELETE is the correct - and ONLY appropriate - answer.

The W32.Beagle bunch uses a randomly generated password that only the malware that hacks into your machine from outside can execute. You have to have good AV to prevent the "carrier" file from getting on your machine AND a good firewall to keep them from hacking in to turn it on.

John